How Xparience uses cookies, what choices you have,
and how we protect your privacy under UK GDPR and
PECR.
Section 01
Cookies are small text files that are placed on your device (computer, phone, or tablet) when you visit a website. They help websites recognise your device on return visits, remember your preferences, and understand how you interact with the site.
Cookies set by the website you are visiting are called first-party cookies. Cookies set by services or tools used by that website are called third-party cookies.
Section 02
Under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR), we are required to obtain your informed consent before placing any non-essential cookies on your device.
Essential cookies are exempt from this requirement — they are strictly necessary for the website to function and may be set automatically. All other cookies require a clear, positive opt-in from you.
This policy reflects our obligations under:
Section 03
We use three categories of cookies on Xparience. We do not use marketing or advertising cookies.
| Category | Purpose | Consent Required? | Examples |
|---|---|---|---|
| Essential / Strictly Necessary | Session management, authentication, security tokens, load balancing. These are required for the site to function correctly. | No — set automatically | Session ID, CSRF token, auth token |
| Analytical / Performance | Understanding how users navigate the site, measuring performance, and identifying errors. Data is aggregated and pseudonymised where possible. | Yes — opt-in required | Google Analytics, Mixpanel, page visit tracking, feature usage, error tracking |
| Preference / Functional | Remembering your settings and preferences such as language, theme, and your cookie consent choices, so you do not need to re-enter them on each visit. | Yes — opt-in required | UI preference cookies, language settings, theme selection |
| Marketing / Advertising | Not used by Xparience. | N/A — not used | - |
Section 04
When you first visit Xparience, a cookie banner will appear at the bottom of your screen. It gives you full control over which cookies are placed on your device.
🍪 We use cookies
We use essential cookies to keep the platform running, and optional analytical cookies to help us improve your experience. We do not use advertising cookies or track you for marketing purposes. You can choose which cookies to accept below.
| Choice | What It Does |
|---|---|
| Accept All | Enables all cookie categories — essential, analytical, and preference cookies. The banner is dismissed and your choice is saved for 12 months. |
| Essential Only | Only essential cookies are set. No analytical or preference cookies are placed. The banner is dismissed and your choice is saved for 12 months. |
| Manage Preferences | Opens a detailed panel where you can toggle individual cookie categories on or off before saving your selection. |
Section 05
Clicking “Manage Preferences” opens a preferences panel where you can control each cookie category individually. Here is how it works:
These cookies are necessary for the platform to function and cannot be disabled. They include session management, security tokens, and authentication.
These cookies help us understand how visitors use Xparience so we can improve the experience. Data is aggregated and pseudonymised where possible. Examples: page visits, feature usage, error tracking.
These cookies remember your settings and preferences, such as your chosen language or theme, so you do not have to re-enter them each visit. You can change your preferences anytime in settings.
Section 06
Your cookie consent preference is stored in a first-party cookie named xp_cookie_consent. This cookie is set on your device and is readable by our servers to ensure the correct cookie configuration is applied to your session.
| Property | Value |
|---|---|
| Cookie name | xp_cookie_consent |
| Cookie type | First-party, server-readable |
| Expiry | 12 months from the date consent is given |
| Format | JSON (see examples below) |
{
"essential": true,
"analytics": true,
"preferences": true,
"timestamp": "2026-04-15T14:30:00Z",
"version": "1.0"
}{
"essential": true,
"analytics": false,
"preferences": false,
"timestamp": "2026-04-15T14:30:00Z",
"version": "1.0"
}Section 07
Where we use third-party analytical tools (such as Google Analytics or Mixpanel), those tools may set their own cookies on your device, but only if you have accepted analytical cookies.
These tools operate under their own privacy policies. We configure them to anonymise your IP address and aggregate data where possible.
If you use Google Tag Manager or a similar tool, analytics tags are configured to fire only when your consent record shows “analytics”: true.
Section 08
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or applicable legal requirements. The version number and date at the top of this page will always show when this policy was last updated.
If we make material changes that affect how we use your data, we will re-show the cookie consent banner and ask for your consent again, even if your previous consent has not yet expired.
Section 09
If you have any questions about how we use cookies, or to exercise any rights you may have under UK GDPR, please contact us:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we are not handling your data in accordance with the law.
Section 10
Before deploying the cookie banner to production, verify all of the following:
Visit the site in a fresh private/incognito browser — banner appears immediately before any non-essential cookies are set.
Check browser cookies before interacting with the banner — only essential cookies are present; no analytics cookies.
Click "Accept All" — banner dismisses, analytics cookies appear, xp_cookie_consent written with analytics: true.
Click "Essential Only" — banner dismisses, no analytics cookies, xp_cookie_consent written with analytics: false.
Click "Manage Preferences" — panel opens, Essential toggle locked ON, Analytics and Preference toggles OFF by default.
In Manage Preferences, toggle Analytics ON and click Save — banner dismisses, analytics cookies present, consent cookie updated correctly.
Revisit the site (banner should not re-show) — xp_cookie_consent cookie is still valid, banner stays hidden.
Clear cookies and revisit — banner reappears correctly.
Test on mobile (iOS and Android) — banner is fully readable, buttons meet 44px minimum tap target, no layout overflow.
Test keyboard navigation — Tab key reaches all banner elements; focus moves to banner on load; all buttons have descriptive aria labels; role="dialog" and aria-label="Cookie consent" are set.