Cookie & Tracking Policy
📋 What This Means in Plain English
- We use localStorage (not cookies) to remember your light/dark theme — it never leaves your browser
- We use functional session cookies on our plugin to secure form submissions and prevent forgery
- These functional cookies are strictly necessary — they don't need consent under GDPR
- We do not use Google Analytics, Meta Pixel, Google Ads remarketing, or third-party analytics services
- We use NetroFlex Smart Pixel for configured first-party digital engagement and conversion measurement where enabled
- Smart Pixel may process anonymous visitor and session identifiers, event information, and consent status/version
- Smart Pixel measurement is subject to applicable consent requirements and the configuration selected by the site operator
- We do not use advertising or tracking cookies on netroflex.com
- We do not track you across websites
- We do not share cookie or tracking data with advertisers on netroflex.com
- Smart Pixel is not used to collect GPS data, precise geographic location, or real-world physical location
- The WordPress plugin pings our API server on the 1st and 15th of each month to verify your license — no visitor or lead data is transmitted
- The Smart Panel pulls intelligence data from our VPS to your dashboard — lead data stays in your own database
- The base.netroflex.com portal may in the future display third-party video or display advertising — this policy will be updated with 14 days notice before that occurs
What We Store and Why
NetroFlex CIP™ uses a minimal approach to browser storage. Here is a complete list of every item we store in your browser:
| Name | Type | Purpose | Duration | Consent Needed |
|---|---|---|---|---|
| Theme Preference | localStorage | Remembers your light/dark theme preference so the page loads in your preferred mode on return visits. Stored entirely in your own browser — never sent to our servers. | Until you clear browser storage | Not required |
| Session Token | Session cookie | Used by the NetroFlex CIP™ plugin to generate and validate security tokens for form submissions. Prevents cross-site request forgery on early access forms. Expires when you close your browser. | Session (browser close) | Not required (functional) |
| CSRF Token | Session cookie | A one-time security token used to authenticate form submissions on the early access page. Prevents automated bot submissions. | Session (browser close) | Not required (functional) |
What We Do Not Use
The following tracking technologies are not used on netroflex.com or in the NetroFlex CIP™ platform at this time:
- Google Analytics — not installed. No Google tracking code runs on our site.
- Facebook Pixel / Meta Pixel — not installed
- Google Ads / remarketing tags — not installed
- Any third-party advertising or retargeting cookies — not present
- Cross-site tracking mechanisms — we do not track users across unrelated websites
- Browser fingerprinting — we do not collect or process device fingerprints
- Persistent tracking cookies — our session cookies expire when you close your browser
- Third-party analytics services — we do not use third-party analytics providers for NetroFlex measurement
Smart Pixel and Digital Measurement
NetroFlex CIP™ may use Smart Pixel, a first-party, domain-scoped measurement and conversion intelligence component, when enabled for an authorized website or application. Smart Pixel is used to understand digital engagement and configured conversion activity within that implementation.
What Smart Pixel may process
- Page views and page information associated with the authorized website
- Form views and form submissions where configured
- Configured conversion events and other digital interaction events enabled by the site operator
- Event type and event time
- Anonymous visitor identifiers used to associate related activity
- Session identifiers used to group related events into a digital session
- Event identifiers and technical request information used for event processing and validation
- Consent status and consent version where supplied by the implementation
Smart Pixel is not a third-party advertising tracker
Smart Pixel is operated as part of the NetroFlex CIP™ platform. NetroFlex does not use Smart Pixel as a Google Analytics, Meta Pixel, Google Ads remarketing, advertising, or cross-site tracking service. Smart Pixel is scoped to the authorized website or application implementation.
Anonymous visitor and session identifiers
Smart Pixel may use anonymous visitor and session identifiers to group related digital events. These identifiers are used for measurement and session context. They are separate from the WordPress form routing identifier used to associate a form submission with the appropriate NetroFlex account or site operator.
Consent
Smart Pixel measurement may be subject to applicable consent requirements. The website or application operator is responsible for determining whether consent is required, obtaining required consent, and configuring the implementation accordingly.
Physical location
Smart Pixel is not used to collect GPS data, precise geographic location, or real-world physical location information.
Lead association
Where supported by the implementation, anonymous digital activity may be associated with a lead record after a conversion event so the site operator can understand the digital activity associated with that conversion. Smart Pixel does not independently identify or track a person across unrelated websites.
NetroFlex CIP™ WordPress Plugin
If you are a site operator using the NetroFlex CIP™ WordPress plugin, the plugin may set functional session cookies on your visitors' browsers to:
- Generate and validate security tokens for forms embedded on your site
- Prevent duplicate form submissions from the same session
These are strictly necessary functional cookies and do not require consent under GDPR's ePrivacy Directive. However, as the site operator and data controller, you are responsible for:
- Disclosing the use of session cookies in your own privacy policy and cookie notice
- Implementing a cookie consent mechanism if you add any non-essential tracking to your site
- Informing your visitors about the use of NetroFlex CIP™ as a data processor
The NetroFlex CIP™ plugin does not set advertising cookies or persistent tracking cookies. Smart Pixel measurement is a separate digital event processing function and should not be confused with the functional security cookies described above.
4.1 License and API Validation Pings
The NetroFlex CIP™ plugin contacts our API server at api.netroflex.com on a scheduled basis (on the 1st and 15th of each calendar month) to verify that your license key and API key are valid and active. This request transmits:
- Your tenant ID and hashed license key — to authenticate your account
- Your server's IP address — as a byproduct of any server-to-server HTTP request
- Plugin version — to ensure compatibility
No visitor data, lead data, or personal information belonging to your site's visitors is transmitted during this check. The license ping is a server-to-server authentication request only. If a license or API key is found to be inactive or suspended, the plugin's protected features will be disabled until the issue is resolved.
4.2 Smart Panel — Intelligence Data Flow
The Smart Panel feature pulls intelligence data — including CIP scores, engagement signals, Dorothy AI responses, and lead classification data — from our VPS at api.netroflex.com and forwards it to your WordPress dashboard on demand. This means:
- Intelligence data is fetched from our servers each time you open the Smart Panel for a lead
- Your lead's stored data (email, name, UTM, behavioral signals) is processed on our servers to generate the intelligence response and is not permanently stored by us
- The raw lead database remains entirely on your own server under your control — we do not store or have access to your lead records
- Dorothy AI queries are processed on our servers — when you ask Dorothy about a lead, that lead's data is temporarily transmitted to our API to generate the response, then discarded
As the site operator, you are responsible for disclosing these data flows to your own visitors in your privacy policy. See the Plugin Data Policy for the full technical breakdown.
base.netroflex.com Portal — Future Advertising
The NetroFlex CIP™ user portal at base.netroflex.com may in the future display third-party advertising, including video and display ad formats served by third-party advertising networks. This section documents our commitment to transparency when that occurs.
This has not been implemented yet. When third-party advertising is introduced to the portal, we commit to:
- Updating this Cookie Policy at least 14 days in advance with full details of the ad network, cookie types, and data flows involved
- Implementing a consent mechanism inside the portal for EU/EEA users before any advertising cookies are activated
- Disclosing the specific third-party ad networks used and linking to their own privacy policies
- Providing a mechanism for portal users to opt out of advertising cookies at any time
- Ensuring Pro plan users are offered an ad-free experience where commercially feasible
Third-party advertising networks typically set their own cookies for purposes including viewability tracking, frequency capping, and audience targeting. We will disclose all such cookies in this policy before they are activated. No advertising cookies are currently set on any NetroFlex domain.
GDPR & ePrivacy Directive
Under applicable GDPR and ePrivacy requirements, cookies that are strictly necessary for a website or service to function may be treated differently from non-essential tracking technologies. The security session cookies described in this policy are used for form security and are not intended for advertising or cross-site tracking.
Smart Pixel is separate from these functional security cookies. Where Smart Pixel measurement requires consent under applicable law, the website or application operator is responsible for obtaining and enforcing the required consent before the applicable measurement activity occurs.
NetroFlex does not use Google Analytics, Meta Pixel, advertising trackers, or third-party analytics providers for its own site measurement.
If you are an EU/EEA resident and have questions about our cookie practices, contact us at privacy@netroflex.com.
How to Manage or Delete Stored Data
You can remove all browser storage set by NetroFlex at any time through your browser settings:
- Chrome: Settings → Privacy and security → Clear browsing data → Cookies and site data / Local storage
- Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data
- Safari: Settings → Advanced → Website Data → Remove All Website Data
- Edge: Settings → Privacy, search, and services → Clear browsing data
Clearing localStorage will reset your theme preference to the default. Clearing session cookies will require a new security token on your next form submission — this happens automatically and requires no action from you.
Contact
For questions about our cookie and tracking practices:
- Email: privacy@netroflex.com
- Website: netroflex.com
Policy Changelog
Every change to this policy is logged here so you can see exactly what was updated and when.
| Version | Date | What Changed | Changed By |
|---|---|---|---|
| 1.3 | September 19, 2026 | Updated tracking disclosures to document Smart Pixel first-party digital engagement and conversion measurement, anonymous visitor and session identifiers, consent status and version, and the distinction between Smart Pixel event processing and functional browser cookies. Removed obsolete future analytics language and updated the canonical policy URL. | NetroFlex Team |
| 1.2 | May 7, 2026 | Added Section 4.1 (License and API Validation Pings), Section 4.2 (Smart Panel Intelligence Data Flow), and Section 4b (Portal Advertising — forward-looking). Updated Plain English summary. Updated compliance chips to scope "No Advertising Cookies" to netroflex.com marketing site only. Fixed localStorage key to generic name. | NetroFlex Team |
| 1.1 | May 6, 2026 | Removed internal storage key names from public-facing table. Replaced with plain-language names: Theme Preference, Session Token, and CSRF Token. Updated all supporting text to match. No changes to actual cookie behaviour. | NetroFlex Team |
| 1.0 | April 21, 2026 | Initial policy published. Covers three browser storage items: theme preference (localStorage), session token, and CSRF token. No advertising or analytics cookies in use. | NetroFlex Team |