Cookie Policy

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage, session storage, pixels, and software development kits (SDKs) in our mobile app. In this policy, we refer to all of these as "cookies".

2. How we use cookies

We use cookies to:

• Keep you signed in and secure your account
• Remember preferences and affiliate referral attribution
• Understand how our Site is used so we can improve it (analytics and diagnostics)
• Provide in-app support messaging where enabled
• Process payments securely through our payment partners

3. Types of cookies we use

Strictly necessary

These cookies are required for the Site to function. Without them, core features such as login and membership areas would not work.

• Supabase Auth cookies (typically names beginning with sb-) store your authentication session on app.knightox.com so you remain signed in securely.
• Security and abuse-prevention signals (such as IP address used for rate limiting on forms) may be processed server-side; these are not stored as marketing cookies.
• kx_no_stats is set only if you object to aggregate site statistics (see section 7). It lasts 12 months and exists solely to honour that request.

Analytics and product improvement

On the marketing site (www.knightox.com / knightox.com), the member web app (app.knightox.com), and the iOS app we use PostHog (EU cloud) for product analytics, feature flags, error tracking, and (after you accept statistics cookies) session replay. PostHog may set cookies or use local storage (for example identifiers beginning with ph_) to recognise returning browsers and measure usage. Session replay masks form inputs. We configure PostHog to send events through our own domain where possible.

Affiliate / referral attribution

We use GoHighLevel Affiliate Manager on knightox.com and app.knightox.com to attribute referrals. This may set an am_id cookie on the .knightox.com domain so a referral can be recognised across our marketing site and member app.

Support messaging

On the member web app we may load Intercom to provide customer support chat. Intercom may set its own cookies or local storage to operate the messenger for signed-in members.

Payments

When you pay for membership or bookings, Stripe may set cookies or use similar technologies as part of its payment forms and fraud prevention. Those cookies are controlled by Stripe under its own policies.

Marketing email (not browser cookies)

Waitlist and newsletter signups on knightox.com are handled via Klaviyo. That processing is based on your marketing consent and is described in our Privacy Policy. It does not rely on placing a Klaviyo tracking cookie on the landing site for those forms.

4. Legal basis

Strictly necessary cookies are used because they are essential to provide the service you request (contract / legitimate interests for security). Where UK PECR requires consent for non-essential cookies (for example certain analytics or marketing cookies), we will only use those cookies after you have given consent, and you can withdraw consent at any time via your browser settings or by contacting us.

5. How long cookies last

Session cookies expire when you close your browser. Persistent cookies remain for a set period or until you delete them. Auth session cookies typically last for the lifetime of your login session (and any refresh window configured by our auth provider). Affiliate attribution cookies may persist for the period needed to attribute a referral. Analytics identifiers may persist across visits until cleared.

6. Websites this consent covers

A CookieYes choice given on any of the sites below is shared across all of them (same registrable domain, .knightox.com). It does not apply to the Knightox iOS app or to unrelated domains.

• https://knightox.com (marketing site)
• https://www.knightox.com (same marketing site)
• https://app.knightox.com (member app)
• https://admin.knightox.com (admin and partner panel)

7. Aggregate site statistics (no cookies)

Independently of the CookieYes banner, our marketing site records a simple count of page requests on our servers. This does not use cookies, does not store your IP address, and does not create a profile of you. Each count uses a shared identifier so individual visitors cannot be told apart.

What we record:

• The page path (not the query string)
• Whether the address included an advertising click id (yes or no only - we never store the id itself)
• Campaign tags when present (utm_source, utm_medium, utm_campaign, utm_content)
• The referring site's host name
• A coarse device class (mobile, tablet, or desktop)
• Whether the request looked automated (yes or no), so crawlers and preview fetchers can be excluded when we compare counts

We do this so we can see how many people reach the site from ads and which pages they land on, including when JavaScript or cookies are blocked. This is statistical measurement, not advertising and not a person profile.

You can object at any time using the control below. Objecting is free and takes effect immediately.

8. Managing cookies

Non-essential cookies are controlled through the CookieYes banner on the sites listed above. You can change or withdraw that choice at any time via the CookieYes preference centre (usually a cookie icon or "Cookie Settings" link on the page).

You can also control cookies through your browser settings (block, delete, or alert you when cookies are set). Blocking strictly necessary cookies may prevent login and other core features from working. You can contact us if you want help understanding what is stored for your account.

For more about your data rights, see our Privacy Policy.

9. Changes to this policy

We may update this Cookie Policy from time to time. The latest version will always be published on this page. Material changes will be highlighted by updating the effective date above.

10. Contact

Questions about cookies or this policy: dataprotection@knightox.com or WhatsApp +44 7883 228 144.