Cookie Policy
Last Updated: October 19, 2026
What xtimates.com and the dashboard store in your browser, and what other companies' tools on them store. Xtimates is a brand of Dycern LLC.
1. What cookies are
This policy is from Dycern LLC, doing business as Xtimates. It goes with the Privacy Policy (xtimates.com/legal/privacy). A cookie is a small file a website saves in your browser so it can recognize you on the next page or the next visit. Similar storage (local storage, session storage) works the same way and is covered here too.
2. Cookies on xtimates.com
| Name | Set by | What it holds | How long |
|---|---|---|---|
| xt_visitor | Xtimates (first-party) | Your first name, company, trade, city and website address, if a link from one of our emails carried them. Nothing else. | Until you close your browser (a session cookie) |
| Analytics | Xtimates (first-party), and Google Analytics 4 if it's in use | A random id for your browser, the pages you visit and how you got here. No name, no email. | First-party: per session. Google Analytics 4: up to two years, under Google's policy |
The xt_visitor cookie exists so the pages you open after a personalized link keep greeting you by name without a flash of generic text. It's set and read only by our own server. It's never sent to another company, and it's re-checked every time it's read so a changed cookie can't put anything odd on the page.
There are no advertising cookies on the marketing site. We don't run Facebook, Google or any other advertising pixel on it, and we don't retarget visitors.
3. Cookies in the dashboard at https://app.xtimates.com
- Sign-in. A session cookie from our sign-in provider (Supabase) keeps you signed in. It holds a signed token, not your password. It expires when the session ends or you sign out.
- Preferences. Your theme (light, dark or system), whether the sidebar is collapsed, and your last date range are kept in local storage so the dashboard opens the way you left it. They hold no personal information.
- Security. A short-lived cookie protects forms against cross-site requests.
4. Other companies' tools
- Stripe. Our payment form loads Stripe's payment element. Stripe sets cookies to process the payment and prevent fraud, under Stripe's own policy.
- The scheduling page. When you book a call, the scheduling provider's page sets the cookies it needs to run the calendar, under its own policy.
- Google Analytics 4. If it's in use on the marketing site, Google sets its _ga cookies under Google's policy. We've turned off its advertising features.
5. Your choices
You can block or delete cookies in your browser's settings. xtimates.com works without cookies: you'd lose the personalized greeting and nothing else. The dashboard needs its sign-in cookie to work. The payment form and the scheduling page need theirs.
We don't respond to browser Do Not Track signals because there's no tracking to turn off. We honor Global Privacy Control signals by treating them as an opt-out of any sale or sharing, which we don't do anyway.
6. Changes
If we add a cookie or an analytics tool, we'll update this page and the date at the top before it goes live.
7. Contact
Dycern LLC, doing business as Xtimates, Indiana. Questions: privacy@xtimates.com.