Cookie Policy
Last updated: August 5, 2026
Xylento uses a short list of cookies — all strictly necessary to run the service. We don't use advertising cookies, tracking pixels, or third-party analytics, so there's no cookie preference toggle on this site: there's nothing optional to opt out of.
Cookies we set
xy_sess — keeps you signed in
Up to 30 days (founders), 2hr idle timeout (staff)
xy_mfa — tracks an in-progress two-factor login
5 minutes
Both are set with HttpOnly (inaccessible to page JavaScript), Secure (HTTPS only), and SameSite=Lax. Neither is used for advertising, tracking, or shared with any third party.
Why no consent banner
Under GDPR and the ePrivacy Directive, cookies that are strictly necessary for a service you've requested (like staying logged in) don't require consent. Since that's the only category of cookie we use, we don't show a cookie banner. If that ever changes — for example, if we add analytics — we'll update this page and add the appropriate consent controls first.
Browser controls
You can block or delete cookies through your browser's settings at any time. Doing so will sign you out and may prevent you from staying logged in to your dashboard.
Contact
Questions about this policy: [email protected].