Effective Date: September 10, 2026 | Last Updated: September 10, 2026
COMEXCEL Cookie and Tracking Technologies Policy governs how cookies, pixel tags, web beacons, local storage objects, and session telemetry operate across our websites and customer administrative portals. COMEXCEL is committed to transparent data practices across all public interfaces and our enterprise Business VoIP & Cloud PBX Solutions. This statement details the technical mechanisms deployed to authenticate accounts, safeguard active browser sessions, measure platform traffic, and manage customized user preferences in compliance with the EU/UK General Data Protection Regulation (GDPR), the ePrivacy Directive, and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).
Cookie Classification & Technical Categories
Transparency and explicit visitor consent form the foundation of our digital privacy architecture. As an integral component of our centralized COMEXCEL Legal & Compliance Hub, this policy establishes clear operational controls allowing visitors and authenticated administrators to inspect, configure, and withdraw consent for specific tracking technologies at any time. Every tracking technology utilized across our web properties is classified into a defined functional tier based on technical necessity, regulatory lawful basis, and data retention duration.
COMEXCEL categorizes web tracking technologies into four discrete functional tiers:
| Cookie Classification | Functional Purpose | Legal Consent Basis | Retention Lifespan | Examples of Tracked Elements |
|---|---|---|---|---|
| Strictly Necessary | Essential for web routing, load balancing, user authentication, and secure checkout operations. | Legitimate Interest / Contractual Necessity (Exempt from opt-in consent) | Session to 12 months | Session authentication tokens, CSRF defense tags, load balancer routing flags, shopping cart state. |
| Functional & Preferences | Preserves user interface customizations, selected language options, and regional portal configurations. | Consent (User Opt-In / Configurable) | 30 days to 24 months | Web UI dark/light theme, dashboard layout preferences, remembered phone number inventory search filters. |
| Performance & Analytics | Aggregates anonymous traffic patterns, page load latency, error diagnostics, and feature usage telemetry. | Consent (User Opt-In / Configurable) | 1 day to 14 months | Pageview metrics, WebRTC call setup telemetry, click path heatmaps, error response codes (e.g., 404/500). |
| Targeting & Advertising | Measures advertising effectiveness and optimizes business communications marketing across partner networks. | Consent (User Opt-In / Configurable) | 30 days to 13 months | Campaign conversion pixels, referral attribution IDs, Tier-1 ad network tracking tags. |
Cloud PBX Portals & WebRTC Operational Telemetry
When authenticated users log into the COMEXCEL Cloud PBX web dashboard or WebRTC softphone interface, specific session identifiers and local browser storage mechanisms are deployed strictly to maintain call continuity, system performance, and interface reliability:
- Session & Token Storage: Encrypted JSON Web Tokens (JWT) and ephemeral session storage are used to maintain authenticated user sessions without exposing account credentials. All session data lifecycles and cache expiration rules follow the timetables established in our Data Retention & Account Deletion Policy.
- WebRTC Network Diagnostics: Real-time audio and video signaling metrics (e.g., jitter, packet loss, round-trip time latency) are processed temporarily in local browser memory to optimize media streams via our Security & Trust Center infrastructure.
- Zero Voice & SMS Payload Tracking in Cookies: COMEXCEL never stores call audio recordings, voicemail audio files, SIP password credentials, or SMS/MMS message bodies inside browser cookies or client-side storage tags.
Third-Party Analytics, Subprocessors & Pixel Tags
COMEXCEL partners with vetted infrastructure, security, and analytics providers to optimize web delivery and safeguard customer portals:
| Infrastructure Partner | Functional Category | Operational Purpose | Data Transferred & Privacy Safeguards |
|---|---|---|---|
| Cloudflare | Strictly Necessary | Edge routing, DDoS defense, WAF filtering, bot mitigation | Ephemeral client IP hash; no PII stored; session-level expiration. |
| WebRTC Gateway Nodes | Strictly Necessary | Media session establishment, jitter/packet loss telemetry | Real-time network QoS data; non-persistent browser memory; zero audio storage. |
| Platform Analytics Engine | Performance & Analytics | Aggregated feature usage, interface latency, error diagnostics | Anonymized IP masking, de-identified session events; respects GPC opt-outs. |
| Customer Support Chat | Functional & Preferences | Real-time support chat state and technical ticket continuity | Authenticated user session tokens; isolated from public ad networks. |
- Web Performance & Infrastructure: Cloudflare and geo-distributed Content Delivery Networks (CDNs) deploy strictly necessary security cookies to identify malicious traffic, prevent DDoS attacks, and enforce rate limits.
- Product Analytics: Anonymized analytics platforms process aggregate event timestamps, geographic regions (country/metro level), and referral sources without combining this telemetry with personally identifiable phone records.
- Enterprise CRM & Chat Integrations: Support chat widgets set persistent functional cookies to maintain continuity between customer support sessions and technical inquiries.
Managing and Withdrawing Cookie Consent
Users have full authority over non-essential cookies and tracking scripts:
- Interactive Cookie Preference Center: You can revisit or alter your consent choices at any time by clicking the persistent “Cookie Preferences” link located in the footer of every COMEXCEL webpage.
- Global Privacy Control (GPC) & Privacy Rights: COMEXCEL honors browser-level Global Privacy Control (GPC) signals. When a valid GPC signal is detected, targeting and advertising cookies are automatically disabled, consistent with the consumer privacy protections detailed in our Privacy Policy.
- Browser-Level Disablement: You can configure your browser (Chrome, Safari, Firefox, Edge) to reject or delete cookies. Note that disabling strictly necessary cookies may degrade core web portal functions, such as customer account login and real-time phone number provisioning engines.
Cookie Governance & Compliance Frequently Asked Questions (FAQ)
Does COMEXCEL sell personal data collected through cookies?
No. COMEXCEL does not sell, rent, or lease personal information or tracking metadata collected through web cookies to third parties for monetary consideration.
Are strictly necessary cookies required to access the COMEXCEL portal?
Yes. Strictly necessary cookies are technically required to maintain secure user sessions, enforce load-balancing, safeguard against cross-site request forgery (CSRF), and permit checkout operations.
How does COMEXCEL handle Global Privacy Control (GPC) signals?
COMEXCEL automatically recognizes and honors Global Privacy Control (GPC) signals sent by compliant web browsers, treating the signal as a valid request to opt out of third-party targeting and advertising trackers.
Do COMEXCEL WebRTC softphone tools store call audio in cookies?
No. Voice streams, SIP credentials, and call audio recordings are never stored inside cookies or browser local storage. Media streams are encrypted end-to-end (TLS 1.3/SRTP) and handled directly through platform switching infrastructure.
Where can I review overall data collection and customer privacy practices?
Detailed information regarding personal data collection, processing, and consumer rights can be reviewed in our master Privacy Policy and Data Retention & Account Deletion Policy.
How does COMEXCEL comply with Safari ITP and third-party cookie deprecation?
COMEXCEL architectures prioritize first-party storage architectures, session-bound JWT tokens, and privacy-preserving API structures. Core telephony and portal capabilities do not depend on third-party cross-site cookies, ensuring uninterrupted platform security across privacy-focused browsers like Safari, Firefox, and Chromium builds.
Web Privacy & Cookie Notice Actions
Inquiries Regarding Tracking Technologies or Privacy Choices?
Our compliance and data protection officers are available to answer questions regarding web tracking, subprocessor listings, or consent management mechanisms.
