VYKIX · Legal Cookie Policy
Document version COOK-2026-09-03
Last Updated: September 3, 2026
1. Scope
This Cookie Policy explains how LIMITBRAVITY - LDA, trading as VYKIX, uses cookies and browser storage on vykix.com, privacy.vykix.com, and portal.vykix.com. Read it with our Privacy Policy.
Portuguese Law 41/2004 generally requires consent before information is stored on or read from your device, except where it is strictly necessary to transmit a communication or provide a service you requested. Where the information is personal data, the GDPR and, where applicable, the UK GDPR and Data Protection Act 2018 also apply.
2. Your Choice
VYKIX uses a self-hosted c15t consent service. The public website offers one optional purpose in this release: Analytics. It is off until you allow it. Necessary storage remains active because it secures the site, remembers your privacy choice, and supports services such as login, checkout, and payment.
- Google Tag Manager and Google Analytics are not contacted before you allow Analytics. VYKIX uses Google's basic consent approach, so declining does not send a cookieless measurement request.
- Allow all and Decline all are available on the first screen. Choose Customize to review the optional Analytics control, then use Save choices. Optional choices are off by default. Refusing is as easy as accepting.
- Your browser stores the host-only choice under
vykix_consent_v1for the current site. VYKIX also records the decision against a random, device-scoped subject in its own consent database. The public consent endpoint does not accept your name, email address, VYKIX account ID, IP evidence, or user-agent evidence. - The browser choice expires after 180 days. This is a VYKIX retention choice, not a statutory period. A material notice or purpose change invalidates the current signed receipt and asks you again.
- Use Cookie settings in the website footer at any time. Withdrawing Analytics stops future optional requests, removes loaded Google scripts, and attempts to remove accessible first-party
_gacookies. You can also clear VYKIX site data in your browser.
The client portal is a separate application. Optional portal analytics and advertising must remain disabled until the portal has the same prior-consent and withdrawal controls and this notice describes the tested implementation.
When you open the Client Portal payment step, WHMCS initializes both the Stripe and PayPal browser libraries so it can display the available methods and let you change your selection without leaving checkout. Both providers may receive IP address, browser, device, request, and security information before your final selection. VYKIX treats only the processing needed to present and secure the requested checkout, support method switching, authenticate transactions, prevent fraud, and process payments as necessary. The provider you confirm receives the additional payment information needed to complete that transaction.
3. Technologies Used in This Release
| Technology | Provider | Purpose | Duration | Basis |
|---|---|---|---|---|
vykix_consent_v1 (host-only cookie and origin-specific localStorage) | VYKIX / c15t | Stores the choice, random device subject, decision time, and policy fingerprint for the current site. | The cookie expires after 180 days. localStorage has no browser-set expiry, but VYKIX rejects and deletes this copy after 180 days or when the policy changes. | Necessary to remember the privacy choice you requested |
__Host-vykix-consent-receipt | VYKIX | Host-only, Secure, HttpOnly proof on privacy.vykix.com that the consent decision was recorded. Website scripts cannot read it. | Up to 180 days | Necessary to prevent optional tools from relying on an unrecorded or stale browser choice |
c15t-pending-consent-submissions and c15t:pending-consent-sync (localStorage) | VYKIX / c15t | Temporary retry state while a choice is being recorded. VYKIX clears it when a write cannot be confirmed. | Temporary | Necessary to save the privacy choice you requested |
c15t-pending-identify-submissions (localStorage) | VYKIX / c15t | Unsupported identity-linking queue that VYKIX deletes before the hosted consent manager starts. Its value is not sent or used by this release. | Deleted when the current consent code starts and browser storage is accessible | Necessary cleanup because identity linking is disabled |
c15t-storage-test-key (localStorage) | VYKIX / c15t | Writes a temporary test value and immediately removes it to check whether the browser permits localStorage. | One storage-access check | Necessary to determine whether the consent interface can store your choice |
vykix-analytics-consent and rackfps-consent (legacy localStorage keys) | VYKIX | Removed during startup as migration cleanup. Their values are not retrieved and cannot authorize analytics. | Deleted when the current consent code next runs and browser storage is accessible | Necessary to prevent an obsolete preference from being treated as current consent |
privacy-consent-storage (legacy c15t localStorage key and cookie) | VYKIX / c15t | c15t may copy an older record to the current key for migration, then removes the legacy copy. A migrated value cannot authorize analytics unless it also passes VYKIX's current age, policy-fingerprint, and signed-receipt checks. | Deleted during migration or cleanup | Necessary to migrate or reject an earlier c15t preference safely |
starlight-theme (localStorage) | VYKIX / Starlight | Remembers the light, dark, or automatic display preference you select in the documentation. | Until you change it or clear site data | Necessary to remember the interface choice you requested |
sl-sidebar-state (sessionStorage) | VYKIX / Starlight | Remembers expanded documentation sections and sidebar position in the current tab. | Until the tab session ends | Necessary to preserve the documentation navigation state you requested |
vykix-dayz-mobile-cta-dismissed, vykix-mobile-trial-cta-dismissed, vykix-rust-mobile-cta-dismissed, vykix-games-mobile-cta-dismissed, vykix-game-vps-mobile-cta-dismissed, vykix-blog-mobile-cta-dismissed, and vykix-frankfurt-mobile-cta-dismissed (sessionStorage) | VYKIX | Remember that you dismissed a mobile call-to-action during the current tab session. | Until the tab session ends | Necessary to remember the interface choice you requested |
_ga and _ga_* | Google Analytics | Distinguishes browsers and stores GA4 session and property state after Analytics consent. | Google's default may be up to 2 years; VYKIX attempts first-party deletion on withdrawal | Consent |
__cf_bm, cf_clearance, and other Cloudflare security cookies when the matching protection is triggered | Cloudflare | Bot management, traffic security, and remembering a completed security challenge. | __cf_bm: 30 minutes of inactivity. cf_clearance: the configured challenge-passage period, normally 30 minutes. | Necessary security |
WHMCSInstanceID | VYKIX / WHMCS | Maintains the portal session, cart, login state, and anti-forgery protections. | Until the browser closes | Necessary for the requested portal service |
WHMCSUser, only when you choose Remember Me | VYKIX / WHMCS | Remembers the portal login you requested. | Up to 365 days or until logout | Necessary to provide the remembered-login choice |
__stripe_mid, __stripe_sid, Stripe session storage such as _ab or _mf, and Stripe.js on the Client Portal payment step | Stripe | Stripe technology may load when the payment step opens, before you select or change methods, so that WHMCS can keep card payment available and Stripe can secure the checkout, authenticate a payment, and assess fraud. VYKIX does not use it for website analytics or advertising. | __stripe_mid: up to 1 year. __stripe_sid: about 30 minutes. Session storage: the payment session. | Necessary to present and secure the payment options in the checkout you requested |
| PayPal JavaScript SDK and payment security storage on the Client Portal payment step | PayPal | PayPal technology may load when the payment step opens, before PayPal is selected, so that WHMCS can present the available option, determine eligibility, let you change methods, authenticate a payment, and prevent fraud. VYKIX does not authorize separable Pay Later promotional messaging, website analytics, or advertising components in this release. | Depends on the PayPal technology used in the checkout; see PayPal's cookie statement | Necessary to present and secure the payment options in the checkout you requested |
WHMCS affiliate and link-tracking cookies, including WHMCSAffiliateID and WHMCSLinkID, are not authorized by this release. Cloudflare Web Analytics, Browser Insights, Zaraz, CookieYes, advertising pixels, remarketing tags, and optional chat widgets are also outside this release and must remain disabled.
4. Optional Analytics
After you allow Analytics, the site loads the approved Google Tag Manager container. The container may load the VYKIX Google Analytics 4 tag and receive page paths and defined site-interaction events. analytics_storage is granted only after you allow Analytics. ad_storage, ad_user_data, and ad_personalization remain denied.
Advertising technology is not deployed in this release. Adding Google Ads, Meta, TikTok, or another advertising recipient requires a separate reviewed release, an updated notice, a new policy revision, and a separate Advertising choice before any such technology loads.
5. Consent Records and Retention
The browser choice lasts up to 180 days. VYKIX keeps pseudonymous server-side consent and audit records for 730 days after the recorded decision, unless a longer period is required for a specific legal claim or regulatory request. The record contains the random subject, decision time, policy fingerprint, and allowed or denied purposes. The consent database does not store a VYKIX client-account ID in this record.
6. Managing Your Choice
Use Cookie settings in the website footer to allow, decline, or withdraw Analytics. You can also delete or block browser storage in your browser. Blocking necessary portal or payment storage may prevent login, checkout, fraud checks, or another service you requested from working.
7. Changes
We update this notice and its date when our actual storage use changes. A material change to optional processing invalidates the signed consent receipt so that we can ask again.
8. Contact
LIMITBRAVITY - LDA, trading as VYKIX
Rua Das Costeiras 103, 4835-421 Guimarães, Portugal
VAT: PT517675110
Email: [email protected]