The binding text. Questions: legal@xentavi.com.
Under the GDPR and the ePrivacy Directive, non-essential cookies are set only after your consent. Necessary storage works without consent because the site cannot function without it.
Cookies we use
| Category | Stored | Purpose | Retention |
|---|---|---|---|
| Strictly necessary | Sign-in session: the staimp_access and staimp_refresh cookies (httpOnly, so scripts on the page cannot read them; sent only to our own /api endpoints) and staimp_session (when the sign-in needs renewing, no credential); the image you chose before signing in (IndexedDB); scan previews, the password-reset address and a random guest id for the sample scan's Terms acceptance (sessionStorage); CookieConsent cookie (Cookiebot, Usercentrics A/S) | Keep you signed in, hold your image until you sign in and start the scan, show scan previews, remember your consent choice | staimp_access 15 minutes; staimp_refresh and staimp_session until you sign out, at most 7 days; the held image up to 24 hours; sessionStorage until you close the tab; CookieConsent 12 months |
| Statistics (opt-in) | Google Analytics 4 (Google Ireland Limited): _ga, _ga_<ID>. Microsoft Clarity (Microsoft Ireland Operations Limited, independent controller): _clck, _clsk and Microsoft's CLID | Count visits and see how pages are used, including Clarity heatmaps and session recordings | _ga and _ga_<ID> 2 years; GA4 user-level data up to 14 months. Clarity recordings 30 days, a sample up to 9 months; Clarity cookie lifetimes are set by Microsoft |
| Marketing (opt-in) | Google Ads (Google Ireland Limited, independent controller): _gcl_au, _gcl_aw and Google's IDE, NID, test_cookie. Microsoft (Microsoft Ireland Operations Limited, independent controller): ANONCHK, MR, MUID, SM, SRM_B, set through Clarity only when you also allow marketing | Measure which ads lead to sign-ups; Microsoft uses its cookies to recognise your browser across its services, including for advertising | _gcl_au and _gcl_aw 90 days; IDE 13 months; NID 6 months; test_cookie 15 minutes; Microsoft cookie lifetimes are set by Microsoft |
Google and Microsoft may process this data in the United States under the EU-US Data Privacy Framework, with EU Standard Contractual Clauses as a fallback.
Page views are also counted without cookies or storage on your device; see the Privacy Policy, section 3.
Managing your choice
The consent dialog appears on your first visit. You can change or withdraw your choice at any time:
You can also block or delete storage in your browser settings; blocking necessary storage will sign you out and drop an image waiting for your scan. See also the Privacy Policy.