Cookie Policy
Transparent management of cookies and similar technologies
This Cookie Policy supplements the Privacy Policy of IAKI International Ltd ("PHAIR") and describes the cookies and tracking technologies used on trustindex.inxa.one as part of the broader inxa.one ecosystem.
Important: trustindex.inxa.one is a subdomain of inxa.one. This means that some cookies set on the parent domain (.inxa.one) are automatically shared with this subdomain to provide a seamless experience across the PHAIR ecosystem.
Data Controller
- Company
- QIAO LAB LLC (owner of the PHAIR brand and inxa.one ecosystem)
- Registered office
- Delaware (USA) — operational offices in Hong Kong, Shanghai and EU
- Data Protection Officer
- [email protected]
- Privacy contact
- [email protected]
1. The inxa.one Ecosystem
trustindex.inxa.one is one of several interconnected subdomains that make up the PHAIR digital ecosystem:
| Domain | Purpose |
|---|---|
inxa.one | Identity provider, XCircle Token activation, AI Agent Console |
trustindex.inxa.one | PHAIR Global Trust Index landing page and cluster wrapper |
agent.inxa.one | Shartify pre-registration and KYB verification |
vote.inxa.one | Market Resonance voting engine (for Rank ≥ 7.0 institutions) |
cast.inxa.one | Nexthcast — Digital Interactive Experiences platform |
nx.inxa.one | XMaps — Interactive AI Advanced Interface |
To provide a seamless experience across these services, certain technical cookies are shared via the parent domain .inxa.one. Your consent preferences are also synchronized across the entire ecosystem.
2. Technical cookies (no consent required)
These cookies are strictly necessary to provide the service and are exempt from consent under Art. 122 of the Italian Privacy Code and the ePrivacy Directive.
| Name | Purpose | Duration |
|---|---|---|
phair-lang |
Remembers your preferred language across visits | Session / 12 months |
mylanguage |
Language preference across the ecosystem | Session |
mycountrycode |
Country code detection for localized content | Session |
3. Security cookies (no consent required)
These cookies are set by our infrastructure provider (Cloudflare) to protect the site from automated attacks and ensure service availability.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
cf_clearance |
Security challenge clearance (set only when bot-detection triggers) | Up to 1 year | Cloudflare |
HttpOnly and Secure flags.
4. Ecosystem session cookies (no consent required)
When you navigate between subdomains of inxa.one or interact with the vertical cluster indices, the underlying application sets first-party session cookies strictly necessary to maintain your authenticated session and application state. These cookies contain no personal identifiers.
| Name | Purpose | Duration |
|---|---|---|
yd_session | Main application session (session ID, activity timestamp) | Session |
mychat | Chat session state identifier | Session |
experienceactive | Active experience state flag | Session |
missionnow | Current mission state | Session |
ranknow | Current rank display state | Session |
segmentnow, datachannel, specialchannelnow | User segment and channel routing | Session |
codea, codeb, seeall, okopen | Application state management | Session |
mycheckin | Check-in state flag | Session |
HttpOnly, Secure and SameSite=Lax flags. They are automatically cleared when you close the browser.
Location-based services (not active on this domain)
No location-based feature is loaded or operational on trustindex.inxa.one.
Location-based interactive services are available exclusively on inxa.one and nx.inxa.one (XMaps — Interactive AI Advanced Interface), where they enable map-based and geolocated interactive experiences.
How location consent works on those domains
On inxa.one and nx.inxa.one, geographic location is processed only after your explicit consent, requested through your browser's standard Geolocation permission prompt. You can accept or refuse this request at any time.
mylatitude, mylongitude) are set on the parent domain .inxa.one with SameSite=Lax, they may technically be visible in your browser when visiting trustindex.inxa.one. However, the location-based functionality is not loaded, executed, or usable on this domain, and no geographic data is processed here.
How to manage location permissions
You can review or revoke browser location permissions at any time:
- Chrome: Settings → Privacy and security → Site Settings → Location
- Firefox: Options → Privacy & Security → Permissions → Location
- Safari: Preferences → Privacy → Location Services
- Edge: Settings → Cookies and site permissions → Location
For the complete description of location-based services and their data processing, please refer to the Cookie Policies of inxa.one and nx.inxa.one.
5. Analytics cookies (consent required)
These services process usage statistics and are activated only after your explicit consent via the cookie banner. Your consent is synchronized across all inxa.one subdomains.
| Service | Cookies set | Purpose | Duration |
|---|---|---|---|
| Google Analytics 4 | _ga, _ga_* |
Aggregated usage statistics with anonymized IP | Up to 2 years |
6. Live chat services (not active on this domain)
No live chat widget is loaded or operational on trustindex.inxa.one.
The Tawk.to live chat service is configured and available exclusively on cast.inxa.one (Nexthcast — the interactive video/audio experiences platform of the PHAIR ecosystem), where it supports real-time assistance during interactive sessions.
twk_uuid_*, mychat) are set on the parent domain .inxa.one with SameSite=Lax, they may technically be visible in your browser when visiting trustindex.inxa.one. However, the chat functionality is not loaded, executed, or usable on this domain, and no chat interaction data is processed here.
For the complete description of the live chat service and its data processing, please refer to the Cookie Policy of cast.inxa.one.
7. Web Storage (localStorage)
Unlike HTTP cookies, localStorage data is never automatically transmitted to servers. It remains entirely on the user's device and is only accessible to JavaScript code running in the browser on the same origin.
| Key | Purpose | Duration | Server transmission |
|---|---|---|---|
phair-lang |
Preferred language (faster lookup than cookie) | Persistent (until manual deletion) | ❌ No |
phair_cookie_consent |
Stores your cookie consent preferences | Persistent (until manual deletion) | ❌ No |
- Are never automatically sent to our servers with page requests
- Are not accessible to standard server-side logs or HTTP intermediaries
- Can be deleted by the user at any time via browser settings
How to clear Web Storage
Users can clear localStorage data through their browser:
- Chrome: Settings → Privacy and security → Clear browsing data → "Cookies and other site data"
- Firefox: Options → Privacy & Security → Cookies and Site Data → Clear Data
- Safari: Preferences → Privacy → Manage Website Data
- Developer console:
localStorage.clear()in DevTools Console
Your rights
You can manage or revoke your cookie preferences at any time by:
- Clicking the "Cookie Preferences" link in the site footer (valid across all
inxa.onesubdomains) - Deleting the
phair_cookie_consentvalue from your browser localStorage - Configuring your browser to block or delete cookies
For the complete list of your GDPR rights (access, rectification, erasure, portability, objection) and how to exercise them, please refer to our Privacy Policy.