Legal
Cookie Policy
One cookie, for signed-in staff only. No tracking, no advertising, no consent banner needed.
Most cookie policies are long because the site behind them sets a great many cookies. This one is short.
Cookies we set
| Name | Purpose | Lifetime | Who gets it |
|---|---|---|---|
xm_session | Keeps an editor or administrator signed in to the CMS. Contains a signed reference to a session record — no personal data. | Until the session expires (14 days by default) or you sign out | Signed-in staff only |
This is a strictly necessary cookie: without it the CMS cannot know who you are. It is HTTP-only (JavaScript cannot read it), restricted to this site, and marked Secure in production.
Cookies we do not set
- No advertising or retargeting cookies.
- No third-party analytics cookies — our analytics are first-party and cookie-free.
- No social media pixels. Share buttons are plain links, not embedded widgets.
- No cross-site tracking of any kind.
This is why you are not being asked to accept anything. Under the ePrivacy rules, consent is required for non-essential cookies; we do not set any.
Local storage
Two small preferences are kept in your browser’s local storage rather than in cookies, which means they are never sent to our server:
xm-theme— whether you chose the light or dark reading surface.xm-announce-*— which announcement banners you have dismissed.
Clearing your site data removes both, with no consequence beyond losing those preferences.
Controlling cookies
Every browser lets you view and delete cookies for a site. Blocking ours will not affect reading; it will only prevent staff from signing in to the CMS.
Questions
Write to Admin@rajivkr.com. See also our Privacy Policy.