Last updated: 30 July 2026
Actoki is a software service developed, owned and operated by Oxiti Ltd. This policy explains how Oxiti Ltd uses cookies and similar browser-storage technologies in connection with the Actoki service on https://actoki.com, including the public website, authentication pages, customer workspace and administration area.
1. What cookies are
Cookies are small text values stored by a browser. Similar technologies include local storage, tags, pixels and scripts that read or write information on a device. They can make a service work, protect it, remember choices or measure use.
2. How Actoki obtains a choice
Necessary technologies operate because they are required to provide or secure the service requested. Optional analytics and advertising technologies are denied by default and are enabled only after the corresponding choice, unless a different lawful implementation is clearly described.
The banner offers equally accessible choices to accept all optional technologies, reject non-essential technologies or manage categories. You can reopen Cookie settings at any time. Rejecting optional cookies does not prevent access to the core service.
3. Cookie categories
Necessary
These are required for authentication, session integrity, CSRF protection, security, load balancing, language selection and remembering the privacy choice. They cannot be disabled in the preference panel.
Analytics
When enabled and configured, analytics helps us understand aggregate website and product use, diagnose journeys and improve reliability. Google Tag Manager can load approved analytics tags only in accordance with the stored choice and configured Consent Mode.
Advertising
When enabled and configured, advertising technologies may measure campaigns and send advertising-storage, ad-user-data or ad-personalisation signals. This category is disabled by default in the supplied Actoki configuration.
4. Current first-party cookies
| Name | Purpose | Category | Typical duration |
|---|---|---|---|
__Host-actoki_session or actoki_session | Maintains a signed-in session, CSRF state, two-factor sign-in state and security timing. | Necessary | Browser session, with server-side idle and absolute timeouts. |
actoki_language | Remembers the selected interface language. | Necessary / user preference | Up to one year. |
actoki_consent_v1 | Stores the chosen cookie categories, consent revision, policy version and event identifier. | Necessary | Normally 180 days. |
5. Security and payment providers
Cloudflare Turnstile or similar anti-abuse services may use necessary browser information or storage to distinguish legitimate users from automated abuse. Stripe Checkout runs on Stripe's domain and may use cookies or similar technologies needed to process payment, prevent fraud and remember checkout state. Those providers control their own domains and publish their own privacy and cookie information.
6. Google Tag Manager and Google Consent Mode
Google Tag Manager is a container that can load tags configured by Oxiti Ltd as the Actoki operator. It does not mean every Google product is active. The supplied configuration sends denied defaults for optional storage. In basic mode, GTM does not load until optional consent permits it. In advanced mode, approved Google tags may load with denied consent and send limited cookieless measurements.
If Google Analytics is added and analytics consent is granted, cookies such as _ga or related identifiers may be created by the configured tag. If advertising tags are added and advertising consent is granted, additional Google or advertising-provider cookies may be used. The administrator must keep this policy and the tag inventory aligned with the actual GTM container.
7. Consent evidence
When a choice is saved, Oxiti Ltd records an event identifier, categories, policy version, consent revision, time, and pseudonymised hashes derived from the IP address and user agent. Raw IP addresses are not stored in the cookie-consent evidence table. These records help demonstrate and honour the choice.
8. Changing or withdrawing consent
Select Cookie settings on an enabled page, change the categories and save. Withdrawing consent stops future optional loading controlled by Oxiti Ltd; it does not automatically erase information already lawfully received by a third party. You can also clear cookies in browser settings, but this may sign you out or reset preferences.
9. Browser controls
Most browsers let you block or delete cookies. Blocking all cookies can prevent sign-in, security checks, payments and other requested features from working. Browser-level global privacy signals are reviewed as standards and legal requirements develop, but the in-product panel is the reliable way to communicate the Actoki category choice.
10. Changes to this policy
We publish material changes as a new version. The administrator can increase the consent revision so the banner asks visitors to choose again. Previous versions are retained internally.
11. Contact
Questions about cookies or privacy can be sent to privacy@actoki.com. Read the Privacy notice for wider information about personal-data processing.