Cookie & Tracking Policy

This policy explains how Xenith uses cookies, browser local storage, and similar technologies, and the limited analytics we rely on. We do not use third-party advertising trackers or sell your data.

Xenith uses cookies and browser storage that are necessary for the Service to function. These include your authentication session (so you stay signed in), and local preferences such as theme and onboarding state. The Service cannot work properly without these.

We use Cloudflare Turnstile on sign-up and public forms to protect against bots and abuse. Turnstile may set a token in your browser to validate that requests are genuine. It is designed to be privacy-preserving and is not used for advertising.

We use a small set of analytics tools to understand aggregate usage and improve performance. PostHog and Google Analytics are non-essential and only run after you accept the cookie banner on your first visit; you can withdraw acceptance at any time in Section 7 below.

• PostHog — product analytics for page views and the specific in-app actions we deliberately track (e.g., starting a focus session). We disable automatic click/interaction capture and session recording, and PostHog respects your browser's Do Not Track signal. It stores an anonymous identifier in local storage rather than a traditional cookie.
• Vercel Analytics & Speed Insights — privacy-friendly, aggregate measurement of page views and performance. Vercel Analytics is designed not to use cross-site tracking cookies and is treated as essential infrastructure monitoring, not a consent-gated analytics cookie.
• Google Analytics — aggregate website traffic measurement. Google Analytics sets cookies to distinguish sessions and devices. We configure it for analytics purposes only, not for advertising audiences.

Subscription payments are handled by Stripe. When you check out, you're redirected to a Stripe-hosted payment page — any cookies Stripe sets for fraud prevention and payment processing are set on Stripe's own domain under Stripe's privacy policy, not by Xenith. We never receive your card details or set payment -related cookies ourselves.

If you opt in to push notifications, your browser stores a push subscription so we can deliver the notifications you requested. You can revoke this at any time in your browser or device settings.

You can withdraw or change your analytics cookie choice at any time — this clears PostHog and Google Analytics from your browser on your next page load:

You can also control or delete cookies directly through your browser settings, and block or clear local storage for our site. Note that disabling essential cookies (such as your session) will prevent you from staying signed in and may break core functionality. You can opt out of Google Analytics across sites using Google's browser opt-out add-on.

Questions about this policy? Contact [email protected].