APEX / COMPANY & YOUR RIGHTS
Cookies & device storage
Last updated:
Apex Rise and Apex Athlete Group are trading names of JOHN-X & COMPANY LTD, a private limited company registered in England and Wales under company number 16571324.
This inventory describes application code reviewed on the date above. Storage used by external services after you visit them is governed by those services. Deployment-specific cookies must be checked again before public release.
Strictly necessary authentication
Supabase authentication uses project-specific sb-<project-ref>-auth-token cookies, which can be split into numbered chunks, and an auth-token-code-verifier cookie during PKCE sign-in. The project reference is configuration-specific; these are name patterns, not invented fixed cookie names. They maintain the requested session and protect authentication. The configured SDK sets a maximum age of 400 days for authentication cookies, refreshed during use; access tokens have a separate session lifetime. The sign-in verifier is removed after the exchange, and signing out clears the application session cookies.
Blocking authentication cookies can prevent sign-in and account features. You can remove browser cookies in your browser settings. We do not treat necessary authentication as optional marketing consent.
User-requested saved athletes
When a signed-out visitor chooses Save on an athlete, the browser stores apex:saved:<athlete-slug> in localStorage. It is written only after that action, is confined to that browser and persists until the visitor unsaves the athlete or clears site storage. It is not sent as a marketing cookie. Signed-in saves use the account database instead.
Analytics and marketing
No optional analytics or marketing cookies, advertising pixels or embedded Instagram widget were found in the current application. Aggregate server counters do not identify individual visitors. Mux player tracking is disabled. We do not display an optional-cookie banner when no optional cookie processing is enabled.
Before enabling optional tracking that requires consent, Apex must provide equally accessible accept, reject and preference controls and prevent that tracking before consent. A future integration requires a new inventory and policy review, including the deployed provider behaviour.
Your choices
You can clear cookies and site data through your browser, unsave device-only athletes, or sign out. These actions may remove preferences or end sessions. To ask about storage or privacy, use the contact details on Company Information.