Cookie Policy
Last updated: July 1, 2026
Draft for legal review. This document is structured placeholder text prepared by the Xacently team and has not yet been reviewed by qualified counsel. Do not rely on it as a final agreement.
1. What cookies are
Cookies are small files a website stores on your device. We use them for two things: running the site (for example, keeping you signed in) and — only if you agree — understanding how the site is used through Google Analytics.
2. Strictly necessary cookies
These are required to operate the site and provide features you ask for, such as logging in. They don’t track you across other sites, and under UK/EU rules they don’t require consent — but we list them here for transparency.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | Keeps you signed in after login (the session token). Its lifetime reflects the “Keep me signed in” choice at login. | 1–30 days |
| next-auth.csrf-token | Protects sign-in requests against cross-site request forgery. | Session |
| next-auth.callback-url | Remembers where to send you after signing in. | Session |
| xa_analytics_consent | Stores your cookie choice so we don’t ask again. | 180 days |
3. Analytics cookies (consent required)
We use Google Analytics 4 to measure aggregate usage and improve the product. These cookies are set only after you choose “Accept” in our cookie banner. If you decline, they are never set (and are cleared if you withdraw consent). IP addresses are anonymised.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics — distinguishes visitors to measure aggregate site usage. | 2 years |
| _ga_<container-id> | Google Analytics — persists session state for GA4. | 2 years |
4. Managing your choice
You can change or withdraw your consent at any time using the “Cookie settings” link in the site footer, which reopens the banner. You can also block or delete cookies in your browser settings; blocking strictly-necessary cookies may stop you from signing in.
5. More information
For how we handle personal data generally, see our Privacy Policy. Google explains its own use of data at policies.google.com.