Cookie Policy
How Nortyx uses cookies and similar technologies to operate the Services securely, prevent fraud, and respect your choices.
1. Introduction
This Cookie Policy explains how Nortyx (“Nortyx”, “we”, “our” or “us”) uses cookies and similar technologies on our websites, web applications, mobile applications, trading interfaces, account portals, onboarding flows, customer support channels and other online services that link to this Policy (together, the “Services”).
Nortyx provides or intends to provide crypto-asset exchange and related platform services. Because such services involve account security, identity verification, transaction integrity, fraud prevention, anti-money laundering and cybersecurity controls, certain cookies and similar technologies are necessary to operate the Services safely and reliably.
This Policy is intended to give clear information about what cookies are, why Nortyx uses them, when consent is required, how users can manage their preferences and how cookie-related data is handled.
2. Scope of this Policy
This Policy applies when you access or use Nortyx online Services, including:
- the Nortyx public website and landing pages;
- registration, login, account management and authentication pages;
- crypto-asset exchange, order, quote, wallet-related and transaction interfaces;
- KYC, AML, sanctions screening, risk assessment and onboarding workflows;
- customer support, dispute, complaint and service-status pages;
- mobile application or progressive web application functionality, where applicable;
- developer, API, institutional or partner portals, where applicable.
This Policy does not replace our Privacy Policy. Where cookie-related information is personal data, it is processed in accordance with our Privacy Policy and applicable data protection laws.
3. About cookies and similar technologies
3.1. Cookies. Cookies are small text files placed on your device or stored by your browser when you visit a website or use an online service. Cookies can allow a service to recognise your browser or device, maintain a secure session, remember preferences, support authentication, improve performance and measure how the service is used.
3.2. Similar technologies. For simplicity, this Policy refers to all of the following as “cookies” unless a distinction is needed:
- HTTP cookies, secure cookies and session cookies;
- local storage, session storage and software development kit storage;
- pixels, tags, web beacons and analytics scripts;
- device identifiers, browser fingerprints and risk signals where used for security or fraud prevention;
- server logs, API logs, error logs and diagnostic events;
- consent-management records and cookie preference tools.
3.3. First-party and third-party technologies. First-party cookies are set by Nortyx or by a service provider acting on our behalf under our instructions. Third-party cookies are set or read by external providers whose tools are embedded in the Services, such as analytics, support, cybersecurity, identity verification, payment, fraud-prevention or compliance providers.
4. Our approach to consent
Nortyx distinguishes between cookies that are strictly necessary for the Services and cookies that are optional or non-essential. Strictly necessary cookies may be used without prior consent where they are required to provide a service requested by the user, operate the platform, maintain security, authenticate users, prevent fraud, preserve account integrity or comply with platform security obligations.
Where cookies are not strictly necessary, Nortyx will request consent before setting or reading them where required by applicable law. Non-essential cookies will not be used before a user has made the relevant choice through our cookie banner, cookie settings tool or equivalent consent mechanism.
Where consent is requested, Nortyx seeks to ensure that consent is freely given, specific, informed and unambiguous. We do not treat silence, inactivity, pre-ticked boxes or merely continuing to use the Services as valid consent for non-essential cookies.
Users must be able to withdraw or change their cookie consent as easily as they gave it. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, but Nortyx will stop using non-essential cookies for which consent has been withdrawn, subject to technical deletion or expiry periods.
Nortyx may keep a record of cookie consent choices, including the selected categories, time of choice, device or browser information and consent version. This allows us to honour preferences and demonstrate compliance.
5. Categories of cookies and similar technologies we use
5.1. Strictly necessary cookies. These cookies are required for the Services to function. They support core features such as page routing, load balancing, secure login, authentication, session management, CSRF protection, account access, order flow continuity, consent-preference storage and service availability. If these cookies are disabled, the Services may not work correctly or may be unavailable.
5.2. Security, anti-fraud and account-integrity cookies. Crypto-asset exchange services are exposed to account takeover attempts, phishing, automated abuse, fraudulent transaction patterns and other security risks. Nortyx may use cookies and similar technologies to detect suspicious behaviour, protect sessions, verify that requests come from a legitimate user, apply rate limits, prevent bot activity, monitor device risk and protect transaction integrity.
5.3. Authentication and user-session cookies. These cookies help identify an authenticated session, remember that a user has logged in, support multi-factor authentication workflows, reduce repeated authentication prompts where appropriate and ensure that account pages are shown only to the correct user.
5.4. Functional and preference cookies. Functional cookies improve convenience and user experience. They may remember language, region, display currency, fiat reference currency, interface settings, cookie choices, support chat state, form progress and other preferences.
5.5. Analytics and performance cookies. Analytics and performance cookies help Nortyx understand how users interact with the Services, identify errors, improve navigation, measure page performance, detect broken flows, understand feature adoption and improve platform reliability. Where required by law, analytics cookies are used only with consent.
5.6. Customer support and service-operation technologies. Nortyx may use cookies or similar technologies to operate help centres, live chat, support-ticket flows, complaint forms, status pages and service notifications. Some of these technologies are necessary to provide support requested by a user; others may require consent if they involve non-essential analytics, session recording or third-party tracking.
5.7. Compliance, KYC and AML-related technologies. Nortyx may use cookies, logs, device information and similar technologies in connection with identity verification, business verification, sanctions screening, AML monitoring, blockchain analytics integrations, fraud prevention, risk scoring, source-of-funds checks and auditability.
5.8. Marketing and advertising cookies. This draft assumes that Nortyx does not currently use cookies for targeted advertising, behavioural advertising, retargeting or advertising profiles. If Nortyx later introduces marketing or advertising cookies, this Policy and the cookie banner must be updated before such cookies are deployed, and consent must be requested where required by law.
6. Crypto-exchange-specific uses
Because Nortyx is designed as a crypto-asset exchange platform, cookie-related technologies may support the following crypto-specific purposes:
- maintaining secure account sessions during high-risk actions such as withdrawals, changes to security settings or API-key management;
- detecting account takeover indicators, suspicious login patterns, automated abuse, credential stuffing and bot activity;
- supporting multi-factor authentication, device recognition and step-up verification;
- protecting exchange orders, quotes, account dashboards and transaction workflows from manipulation or session confusion;
- monitoring security events and technical errors that could affect balances, transaction display, order placement or account availability;
- supporting KYC, AML, sanctions, fraud-prevention and regulatory audit controls;
- maintaining consent choices and user preferences across relevant Nortyx services.
Nortyx does not use cookies to access private keys stored in user-controlled wallets. If any wallet connection, custody, MPC, smart-contract, API or external wallet functionality is implemented, related cookies and local storage must be separately assessed and documented before launch.
7. Cookie and technology register
Nortyx may use different categories of cookies and similar technologies on its website, trading platform, client portal and related online services. The exact cookies used may vary depending on the functionality available on the website, the user’s location, the type of device used, the user’s cookie preferences and the services accessed.
7.1. Strictly Necessary Cookies. Nortyx uses strictly necessary cookies and similar technologies to make its website and platform work properly. These cookies are required for core functions such as page navigation, secure login, account authentication, session management, protection of user accounts, fraud prevention, transaction-related functionality, security monitoring and compliance-related controls. Because these cookies are necessary for the operation, security and availability of the Services, they cannot be disabled through the cookie settings tool.
7.2. Functional Cookies. Functional cookies help Nortyx remember choices made by users and provide enhanced functionality. These cookies may be used to remember language preferences, region settings, interface preferences, cookie choices, login preferences, form progress and other settings selected by the user. Where required by applicable law, Nortyx will only use non-essential functional cookies with the user’s consent.
7.3. Analytics and Performance Cookies. Nortyx may use analytics and performance cookies to understand how users interact with its website and online services. These technologies may help Nortyx measure page visits, traffic sources, browser and device types, session duration, error messages, loading times, navigation patterns and general usage trends. Where required by applicable law, analytics and performance cookies will only be used after the user has provided consent.
7.4. Security, Fraud-Prevention and Device-Risk Technologies. As a crypto-asset exchange, Nortyx may use cookies, local storage, session identifiers, device-risk signals and similar technologies to protect users, accounts and transactions. These technologies may help Nortyx detect unusual login attempts, identify suspicious device or browser activity, prevent account takeover, monitor fraud risks, support sanctions and AML-related controls, and maintain the security of crypto-asset transactions.
7.5. Third-Party Technologies. Some cookies or similar technologies may be provided or operated by trusted third-party service providers that support Nortyx’s website, platform and business operations. Third-party providers may process cookie-related information on behalf of Nortyx or in accordance with their own privacy notices and contractual obligations. Nortyx does not sell cookie-related information to advertisers or unrelated third parties.
7.6. Advertising and Marketing Cookies. Nortyx does not currently intend to use cookies for targeted advertising or behavioural marketing purposes. If Nortyx decides to use advertising, remarketing or similar marketing cookies in the future, this Cookie Policy will be updated and such cookies will only be used where the user has provided consent, if required by applicable law.
7.7. Cookie Duration. Cookies may remain on a user’s device for different periods depending on their purpose. Session cookies are usually deleted when the browser is closed. Persistent cookies may remain stored for a longer period until they expire, are replaced, or are deleted by the user.
7.8. Managing Cookie Preferences. Users can manage their cookie preferences through the cookie banner or cookie settings tool, where available. Users may accept all cookies, reject non-essential cookies or manage preferences by category. Users may also block or delete cookies through their browser settings.
8. Information collected through cookies
Depending on the cookie or similar technology, Nortyx may collect or process the following information:
- IP address and approximate location derived from IP address;
- device type, operating system, browser type and browser version;
- screen size, language setting, time zone and interface preferences;
- session identifiers, authentication status and login metadata;
- cookie consent choices and timestamps;
- pages viewed, links clicked, referring pages and navigation path;
- transaction-flow, order-flow or onboarding-flow event metadata where necessary for service operation, diagnostics, security or compliance;
- error reports, performance metrics, API response data and crash diagnostics;
- security signals, device-risk signals, bot-detection signals, rate-limit events and suspicious activity indicators;
- support chat state, help-centre interactions and support ticket metadata where applicable.
Some cookie-related information may be personal data. Nortyx processes such information in accordance with its Privacy Policy and applicable data protection laws.
9. How we use cookie-related information
Nortyx may use cookie-related information to:
- operate, maintain and secure the Services;
- authenticate users and maintain secure sessions;
- prevent unauthorised access, fraud, market abuse, bot activity and misuse of the Services;
- support KYC, AML, sanctions screening, fraud-prevention and security controls;
- protect high-risk actions such as withdrawals, security-setting changes and API-key management;
- remember preferences such as language, region, display currency and cookie choices;
- measure and improve website and platform performance;
- detect technical errors, service interruptions and degraded user flows;
- provide customer support and service communications;
- maintain auditability and comply with legal, regulatory, operational and security obligations.
Nortyx does not sell cookie-related information to advertisers or unrelated third parties. If Nortyx later uses advertising technologies, the relevant disclosures and consent mechanism must be updated before deployment.
10. Third-party providers and third-party cookies
Nortyx may use trusted service providers to operate, secure, monitor and improve the Services. These providers may set, read or otherwise process cookie-related information where necessary for the services they provide to Nortyx. Categories of providers may include:
- cloud hosting, infrastructure, content delivery network and load-balancing providers;
- cybersecurity, anti-bot, fraud-prevention and device-risk providers;
- identity verification, KYC and AML technology providers;
- sanctions screening, politically exposed person screening and blockchain analytics providers;
- payment, fiat gateway, banking, transaction monitoring and reconciliation providers;
- analytics, performance monitoring, error logging and diagnostics providers;
- customer support, help desk, chat, complaint-management and service-status providers;
- consent-management platform providers;
- legal, audit, compliance and professional service providers where relevant.
Third-party providers may process cookie-related information under their own privacy notices, under contract with Nortyx or both, depending on the provider and the integration. Nortyx will seek to configure third-party tools so that non-essential cookies are not set before valid consent is obtained where required.
11. International transfers
Some service providers may process cookie-related information in countries outside the country where the user is located, including outside the European Economic Area. Where cookie-related information is personal data and is transferred internationally, Nortyx will apply appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, transfer risk assessments and supplementary measures.
The specific transfer arrangements should be described in the Nortyx Privacy Policy and provider list once the production provider stack is confirmed.
12. Managing cookie preferences
12.1. Cookie banner and settings tool. Where available, users can manage cookie preferences through the Nortyx cookie banner or cookie settings tool. The banner should provide a clear option to accept all non- essential cookies, reject non-essential cookies and manage choices by category. Nortyx should not use pre- ticked boxes for non-essential cookies.
12.2. Changing or withdrawing consent. Users may change or withdraw consent at any time through the cookie settings tool, where available. When consent is withdrawn, Nortyx will stop using the relevant non- essential cookies and will take reasonable steps to delete or disable them, subject to technical limitations and retention obligations.
12.3. Minimum service after withdrawal. Withdrawing consent for non-essential cookies should not prevent users from accessing the core Services. However, some optional features, analytics-based improvements, embedded content, preference settings or support tools may be unavailable or may function less effectively.
13. Browser, device and app controls
Most browsers allow users to block cookies, delete stored cookies, receive warnings before cookies are stored or restrict third-party cookies. Users can usually find these controls in the browser privacy or security settings.
Blocking all cookies may affect the functionality, security and availability of the Services. For example, users may be unable to log in, complete identity verification, maintain a trading session, place orders, access support tools or complete security checks.
If Nortyx offers a mobile app, device-level settings may also allow users to limit tracking, reset advertising identifiers, restrict app permissions or disable certain analytics. These controls may be separate from the web cookie settings tool.
Some browsers or extensions send “Do Not Track” or global privacy signals. Nortyx will respond to such signals where required by applicable law or where technically supported.
14. Retention periods
Cookies may be session-based or persistent. Session cookies are usually deleted when the browser or app session ends. Persistent cookies remain for a defined period or until deleted by the user or the browser.
Retention periods depend on the cookie purpose. Security, authentication, consent-record and compliance- related records may be retained longer where necessary to protect the Services, investigate incidents, comply with legal obligations, resolve disputes or maintain auditability.
Nortyx should configure cookies with retention periods that are proportionate to their purpose and should avoid indefinite or excessive retention for non-essential cookies.
15. Security, account protection and fraud prevention
Nortyx may use cookies and similar technologies as part of its security architecture. This may include detecting suspicious login attempts, preventing credential stuffing, identifying automated abuse, enforcing rate limits, verifying device consistency, supporting MFA workflows, monitoring withdrawal-risk signals and protecting account sessions.
Security and fraud-prevention technologies may operate together with server-side logs, authentication systems, blockchain analytics, transaction monitoring, AML systems, sanctions screening systems and other risk controls. These controls are particularly important for crypto-asset exchange services because unauthorised account access or transaction manipulation may cause irreversible financial harm.
Nortyx will seek to limit cookie-related security data to what is necessary for the relevant security, fraud- prevention, compliance or operational purpose.
16. Children and restricted users
Nortyx Services are intended for users who meet the applicable age, legal capacity, jurisdictional and onboarding requirements for crypto-asset services. The Services are not intended for children. Nortyx does not knowingly use cookies to profile children or to provide crypto-asset exchange services to children.
If Nortyx later introduces educational, public-content or non-trading services accessible to a broader audience, cookie and privacy disclosures should be reassessed before launch.
17. Relationship with our Privacy Policy
This Cookie Policy explains how Nortyx uses cookies and similar technologies. Our Privacy Policy explains in more detail how Nortyx collects, uses, shares, stores and protects personal data, including personal data collected through cookies, logs, device data and similar technologies.
If there is any conflict between this Policy and the Privacy Policy regarding the processing of personal data, the Privacy Policy should apply to the extent of that conflict, unless this Policy provides more specific information about cookies or similar technologies.
18. Updates to this Policy
Nortyx may update this Policy from time to time to reflect changes in the Services, technologies used, cookie categories, providers, security practices, legal requirements or business operations.
Updated versions will be published on the Nortyx website or made available through the Services. The “Last updated” date at the beginning of this Policy indicates when the Policy was last revised. Where required by law, Nortyx will request renewed consent before using new categories of non-essential cookies or materially changing the purposes for which cookies are used.
Questions about this policy? Our compliance team is here.
Reach out for clarifications about your rights, data handling, or jurisdictional access.