Cookie Policy
Last updated: August 6, 2026
This Cookie Policy explains what cookies are, which cookies XBio uses, and how you can control them.
What Are Cookies?
Cookies are small text files placed on your device by a website. They are widely used to make websites work, improve user experience, and provide information to site owners.
Cookies We Set
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| xbio.session_token | Authentication - keeps you logged in | 30 days | Necessary |
| theme | Stores light/dark mode preference | 1 year | Preference |
Third-Party Cookies
Vercel Analytics and Sentry Session Replay only run if you click "Accept" on the cookie banner - declining or not choosing keeps them off. Stripe and Cloudflare Turnstile are necessary for payments and signup spam protection to function, so they aren't gated by the banner.
Sentry error monitoring is a separate case. It stores nothing on your device - no cookies, no local or session storage - so there is nothing for a cookie banner to consent to. It runs for everyone on the basis of our legitimate interest in keeping the service working and secure, with IP address collection disabled and error reports scrubbed of email addresses and access tokens before they are sent. You can object to this at any time by contacting us.
| Service | Purpose | Type |
|---|---|---|
| Stripe | Fraud detection and secure payment processing. Set when you visit /shop or make a purchase. | Necessary |
| Cloudflare Turnstile | Bot/spam protection on the signup form. No tracking cookie - verifies your IP address is human. | Necessary |
| Sentry (error monitoring) | Crash and error reports so we can fix faults. Sets no cookies and uses no device storage. Runs for everyone under legitimate interest; IP collection is off and reports are scrubbed of emails and tokens. | Necessary |
| Sentry (session replay & tracing) | Replays a recording of your session when an error occurs, plus performance tracing. Uses session storage. Only loads if accepted. | Analytics |
| Vercel Analytics | Aggregate page view and Web Vitals analytics. Privacy-friendly - no personal data shared. Only loads if accepted. | Analytics |
How to Control Cookies
You can control or delete cookies at any time through your browser settings. Note that disabling the session cookie will log you out and prevent login. Browser-specific instructions:
Questions
For questions about our use of cookies, see our Privacy Policy or contact us.