This is a draft, waiting for review by our lawyers, and isn't in force yet. Highlighted parts are still to be filled in or confirmed.
In short
We keep very little in your browser, and only what Xtopay needs to work. We don't use advertising cookies, and we don't use outside analytics or tracking on this website, the dashboard, the pay pages or the checkout. So there's nothing to accept or turn off.
A cookie is a small file a website keeps in your browser. Some of what we keep is in your browser's local storage instead, which works the same way, so we list both.
Everything we keep
| Dashboard | xtopay_session (a cookie) | Keeps you signed in. It can't be read by the page's scripts, and it's sent only to Xtopay over a secure connection. | Up to 90 days |
|---|---|---|---|
| xtopay.notifications.seenAt | When you last opened your notifications, so new ones stand out. | Until cleared | |
| Pay pages | xtopay.visitor | A random number, so a business's visit count counts you once. It isn't linked to your name or number. | Until cleared |
| Everywhere | theme | Whether you chose the light or dark look. | Until cleared |
Other people's pages
When you pay by card, you type your card's details on our payment partner's secure page, which may keep its own cookies to make the payment safe. Their policies cover those. Our staff's admin pages use a sign-in cookie of their own, which customers and businesses never get.
Clearing them
You can clear cookies and site data in your browser's settings at any time. If you clear the sign-in cookie, you'll need to sign in to the dashboard again; nothing else stops working.
If this changes
If we ever add a cookie, we'll list it here first, and if it isn't needed for Xtopay to work, we'll ask before we use it. Questions: privacy@xtopay.co, or read our Privacy Policy.