Cookie policy

01What cookies are

Cookies are small text files a website stores in your browser. Similar technologies, such as local storage, keep small settings on your device in the same way.

02The cookies Xolt sets

Sign-in session (__Secure-better-auth.session_token, set on app.xolt.io): keeps you signed in. Strictly necessary. Expires after 7 days of inactivity or when you sign out.

Two-step verification (__Secure-better-auth.two_factor): remembers, for a few minutes, that you entered a correct password and still need to enter your code. Strictly necessary.

Language (NEXT_LOCALE): remembers the language you chose. Strictly necessary for a site in three languages. Kept for 1 year.

Sidebar (sidebar_state): remembers whether you collapsed the app's sidebar. Functional. Kept for 7 days.

Your cookie choice (xolt_consent, set on xolt.io): remembers what you accepted or rejected in the cookie banner, so we do not ask again. Strictly necessary. Kept for 6 months.

03Local storage

Your light or dark theme choice is kept in your browser's local storage (theme). It never leaves your device.

04Third-party cookies

Xolt does not load advertising or social media scripts. When you connect Amazon or Google, you sign in on their own pages, which set their own cookies under their own policies.

05Analytics, only with your consent

With your consent, the public website counts page views with Vercel Web Analytics, run by our hosting provider. It sets no cookies and does not follow you across sites; it records the page, the referrer, a coarse location derived from your address and the browser type, and it never runs inside the app. It stays off until you accept it in the banner, and you can turn it off again from Cookie settings in the footer.

06How to control cookies

Choose or change what you accept from Cookie settings in the footer of every public page. You can also delete or block cookies in your browser settings; if you block the session cookie you will not be able to sign in.

07Changes

If we add a cookie or a category, we list it here first, and we ask for your consent again where the law requires it.

08Contact

AUTHECT - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email: privacy@xolt.io.