Cookie Policy
Last updated: July 17, 2026
Xicmo uses a small number of cookies and similar technologies (localStorage) to run the product. We do not use advertising or cross-site tracking cookies, and we never sell your data.
Cookies we set
| Name | Type | Purpose | Duration |
|---|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | Strictly necessary | Keeps you signed in to your workspace. | 30 days |
| next-auth.csrf-token | Strictly necessary | Protects forms against cross-site request forgery. | Session |
| xicmo:cookie-consent | Strictly necessary (localStorage) | Remembers whether you accepted or declined analytics cookies. | Until cleared |
| xicmo:* preferences | Functional (localStorage) | Stores UI preferences like sidebar collapse, theme, and in-progress form drafts, on your device only. | Until cleared |
| _ga / _ga_* | Analytics (optional) | Google Analytics 4, anonymous usage statistics. Only set if you click “Accept all” in the cookie banner. | Up to 24 months |
Managing your choice
The first time you visit, a banner lets you accept all cookies or keep only the strictly necessary ones. Analytics never load unless you accept. To change your choice later, clear the xicmo:cookie-consent entry from your browser's site data (or clear cookies for this site) and the banner will ask again on your next visit. You can also block or delete cookies entirely in your browser settings — signed-in areas require the strictly necessary cookies to function.
Questions
Email privacy@xicmo.com about anything cookie or privacy related.