Cookie Policy
1. What Is a Cookie?
Cookies are small text files that the websites you visit place on your browser or device. They are used to remember your account, keep your session secure and run the service.
2. Cookies We Use
2.1. Strictly necessary cookies (cannot be turned off)
- sb-access-token / sb-refresh-token — Supabase session token (authentication).
- xv-locale — interface language preference (Turkish / English).
- xvirals_user_id — anonymous user identifier (localStorage, not a cookie).
2.2. Performance / analytics cookies
These cookies load only with your consent: on your first visit a bar at the bottom lets you choose "Accept" or "Decline". If you decline, none of them load.
- Google Analytics 4 (
_ga,_ga_*) — aggregate measurement of which pages are visited and where traffic comes from. IP addresses are anonymized. Cookie lifetime up to 2 years; data kept in Google Analytics for up to 14 months. - Microsoft Clarity (
_clck,_clsk,CLID) — heatmaps and anonymous session recordings to find interface problems. What you type into form fields is masked and not recorded. Cookie lifetime up to 1 year.
You can withdraw your consent at any time:
2.3. Advertising cookies
We use no advertising cookies.
3. Third-Party Cookies
- Dodo Payments — only when you are redirected to the payment page from
/dashboard/billingmay Dodo Payments set cookies on its own domain. Those cookies are governed by Dodo Payments's privacy policy. - Google OAuth — if you use the sign-in-with-Google option, Google sets identity cookies on its own domain.
4. Managing Cookies
You can delete or block cookies from your browser settings. However, if you disable the strictly necessary cookies you will not be able to sign in or use the service.
- Chrome cookie settings (opens in a new tab)
- Firefox cookie settings (opens in a new tab)
- Safari cookie settings (opens in a new tab)
- Edge cookie settings (opens in a new tab)
5. Retention
- Session cookies are deleted when you close the browser.
- The refresh token cookie is valid for 30 days (Supabase default).
6. Changes
We update this policy whenever we add a cookie or change what an existing one is used for.
7. Contact
For questions: info@xvirals.com