Effective Date: 2026-07-26
Version: 1.0.0
1. What this notice covers
This notice is from Qualsis, LLC ("Qualsis", "we"), 3540 Toringdon Way, Suite 200, Charlotte, NC 28277, USA. It explains what we store on your device - cookies and similar technologies such as localStorage, sessionStorage, and pixels (together, "cookies") - when you use:
- our websites - qualsis.com and qortexos.com (qoherenceai.com will be added to this notice before it goes live); and
- the QortexOS application, including its public sign-up flow.
It also explains how we ask for your consent, how to change your mind, and how we keep proof of the choice you made. It works together with our Privacy Policy (section 10 below).
2. Our approach: consent first, everywhere
Different places regulate cookies differently. Some allow analytics or preference cookies on an opt-out basis; EEA rules generally require prior consent unless a narrow exemption applies. We apply the stricter standard everywhere:
- Nothing optional before you choose. We currently use only cookies and similar technologies that are necessary for requested services or otherwise exempt from prior consent, as described below. We do not store or read anything non-essential on your device before you have made a recorded choice. Wherever you are, we ask for your consent before placing non-essential cookies.
- Strictly necessary cookies are the exception. These are always active: they are necessary for the services you request or otherwise exempt from prior consent (sign-in sessions, security, fraud prevention, form protection, and the cookie that remembers the choices you make here).
- Accepting and declining are equally easy. The first thing you see offers "Accept all" and "Reject all" side by side, with the same prominence, plus a "Manage choices" path to per-category settings.
- Your choice is enforced. Tags and scripts in a category you declined or withdrew do not fire. On withdrawal, non-essential tags stop firing immediately.
- You can change your mind at any time through the preference center on this page, reachable from the "Cookie preferences" link in the footer of every page.
3. The categories we use
Category | What it does | Basis |
|---|---|---|
Strictly necessary | Makes the site or product work at all: sign-in sessions, security, fraud prevention, form protection, and the cookie that remembers the choices you make here. | Always active; necessary for the services you request or otherwise exempt from prior consent. Turning these off would break the service. |
Preferences | Remembers settings you choose, such as language and display options, so you do not have to set them again. | Your consent. |
Analytics | Measures how our sites are used - which pages are read, where visitors run into problems - so we can improve them. | Your consent. |
Personalisation | Tailors content on our sites to what you have shown interest in. | Your consent. |
Marketing | Supports Qualsis marketing communications and measures whether they were useful. | Your consent. |
Not every category is in use on every surface. The tables below say exactly what is set where. The QortexOS application currently uses no analytics, personalisation, or marketing cookies of any kind (section 5).
4. Cookies on our websites
The table below lists every cookie our websites set, verified by a scan of the live sites. The most recent scan was performed on July 26, 2026.
Name | Set by | Purpose | Category | Duration |
|---|---|---|---|---|
qusp_consent_v2 | Qualsis | Remembers the cookie choices you made so we do not re-ask on every page | Strictly necessary | 6 months |
_ga | Google Analytics (script loaded by our sites) | Tells returning browsers apart using a random identifier so visits and pages read can be counted; contains nothing that identifies you by name | Analytics - set only after you accept analytics | 13 months (400 days) |
_ga_6D8WNPHWS9 (qualsis.com); _ga_VTTWFV89ST (qortexos.com) | Google Analytics (script loaded by our sites) | Keeps the measurement session for the site's own analytics property while you browse | Analytics - set only after you accept analytics | 13 months (400 days) |
Server logs. Like almost every website, our web servers keep standard access logs (IP address, page requested, browser type, timestamp) for security and operations. These are not cookies; we note them here for completeness. Website server logs are ordinarily retained for up to 90 days and then automatically deleted or anonymized, unless a longer period is reasonably necessary to investigate a security incident, prevent abuse, resolve a service problem, or comply with law.
5. Cookies and storage in QortexOS
QortexOS is a business application. What it stores in your browser is limited to making the application work and remembering your own settings.
Cookies:
Name | Purpose | Duration | Set by | Category |
|---|---|---|---|---|
qos_session | Keeps you signed in. An opaque, random session identifier - it reveals nothing about you by itself and contains no token readable by page scripts. | 30 minutes, extended while you are active | Qualsis | Strictly necessary |
qos_csrf | Protects forms and requests against cross-site request forgery. | 30 minutes | Qualsis | Strictly necessary |
qosp-locale | Remembers a display language you deliberately chose. Never set automatically: until you choose, QortexOS follows your browser's language setting without storing anything on your device. If you are signed in, your choice is saved in your account profile on our servers instead of in this cookie. | Session; up to 12 months only if you choose "Remember this language on this device" | Qualsis | Preferences. The session-only choice runs without prior consent where applicable law exempts settings you deliberately select; the "remember" option is set only with your consent, which you give by selecting it. |
sidebar_state | Remembers whether you left the navigation sidebar open or closed. Written only when you toggle it. If you are signed in, your choice is saved in your account profile on our servers instead of on your device. | Session; kept on this device beyond the session only if you choose that in Preferences (persistence period set at implementation and re-verified before publication) | Qualsis | Preferences. The session-only choice runs without prior consent where applicable law exempts settings you deliberately select; storage beyond the session is set only with your consent, which you give by choosing it in Preferences. |
Browser storage (localStorage / sessionStorage):
Name | Purpose | Duration | Category |
|---|---|---|---|
theme | Your light/dark/system display choice. Written only when you use the theme toggle. If you are signed in, your choice is saved in your account profile on our servers instead of in browser storage. | Session; kept on this device beyond the session only if you choose that in Preferences | Preferences. The session-only choice runs without prior consent where applicable law exempts settings you deliberately select; storage beyond the session is set only with your consent, which you give by choosing it in Preferences. |
qos-signup-checkout | Lets the sign-up flow resume if the page reloads mid-checkout. Never contains your password. | Cleared when the tab closes | Strictly necessary |
qos_impersonation_token, qos_impersonation_session, qos_original_session_active | Internal Qualsis support sessions only. Never set for customers or their users. | Cleared when the tab closes | Strictly necessary (internal) |
What QortexOS does not do. The product sets no analytics, marketing, or advertising storage of any kind, loads no third-party analytics or advertising scripts, and never places authentication tokens where page scripts can read them. The product includes a first-party usage-telemetry collector that sends operational events to Qualsis only; it stores nothing on your device beyond the qos_session cookie listed above.
6. Third-party cookies
On the QortexOS sign-up flow, one third party sets cookies today:
- Stripe, LLC (payment provider). The QortexOS sign-up flow loads Stripe.js only when you reach the payment step. At the payment step, Stripe may set cookies used to process the transaction and prevent fraud. We treat these cookies as necessary for secure checkout where permitted by applicable law. Stripe's published cookie inventory currently documents three such cookies: __stripe_mid (1 year), __stripe_sid (30 minutes), and m (2 years). These are governed by Stripe's own privacy notice.
Our websites set no third-party cookies.
We will update this notice before any other third-party cookie appears on our surfaces.
7. How to make and change your choices
- The preference center on this page lets you make and change granular category choices (preferences, analytics, personalisation, marketing) at any time. The "Cookie preferences" link in the footer of every page reopens it.
- Withdrawing is as easy as accepting. Turn a category off and it takes effect immediately: non-essential tags in that category stop firing, and we expire or delete the cookies we set in it where technically feasible.
- We re-ask periodically. We remember your choice for six months, whether you accept or reject, and ask again sooner if our purposes or the technologies involved materially change.
- Browser controls. You can also block or delete cookies in your browser settings; doing so may break parts of our services, including sign-in.
8. Global Privacy Control and Do Not Track
- Global Privacy Control (GPC). Because nothing non-essential runs without your consent, a browser that never opts in is never tracked, whatever signals it sends. In addition, where your state's law treats GPC as a formal opt-out (California, for example), we honor it: if your browser sends the GPC signal, we treat it as a request to opt out of any "sale" or "sharing" of your personal information as those terms are defined there, and we record it like any other choice. We never treat the signal, or its absence, as consent, and a later contrary choice is accepted only through a separate affirmative-consent process permitted by applicable law. Where California's rules apply and we have processed your signal as an opt-out, the preference center on this page shows that status ("Opt-Out Request Honored").
- Do Not Track (DNT). Older DNT browser signals have no settled legal meaning. We do not treat DNT as consent to anything; under our consent-first model, a DNT browser that never opts in is treated exactly like one that declined.
California residents: the preference center on this page is also the mechanism for opting out of any sharing of identifiers for cross-context behavioral advertising described in Privacy Policy section 16.2.
9. Our record of your choice
When you make or change a choice, we keep a record so we can prove we respected it: a random consent identifier (we do not need your name for this), the time, the version of the banner text and of this notice you were shown, and your per-category choices. Withdrawals are recorded the same way, as a new entry - never by erasing the old one.
We keep these records while your choice remains in force and for up to seven years after you change or withdraw it, deleting or de-identifying them earlier once they are no longer needed to demonstrate your consent.
10. This notice and our Privacy Policy
This notice covers what we store on your device. What personal data we collect, why, how long we keep it, and your rights are described in our Privacy Policy at https://qualsis.com/legal/privacy - see in particular Section 13 (Cookies and tracking technologies) and Section 16 (Your rights and choices).
11. Changes to this notice
When we change this notice, we update the version and effective date at the top. If a change is material - a new category, a new third party, a new purpose, or a material change to the technologies involved - we re-ask for your consent rather than relying on the old choice.
12. Contact
Questions about cookies or this notice: Qualsis Privacy Team.
Last updated: July 26, 2026 · Effective: July 25, 2026