Last updated: 20 July 2026. XENA deliberately keeps this short list short — here's exactly what we use, and what we don't.
One essential session cookie (__Host-xena_session). Set only when you log in, this is what keeps you signed in as you move between pages. It's strictly necessary for the service to function — there's no way to use a XENA account without it. It's a secure, HTTP-only cookie: no script on any page (ours or anyone else's) can read its contents, and it isn't used for tracking, advertising, or analytics.
Self-hosted, cookie-free product analytics. When you browse XENA, a small event (page path, an optional label for which button/link you used, referrer, timestamp) is sent to our own /api/track endpoint and stored in our own database — not a third-party analytics platform. This does not use a cookie, a fingerprint, or any other persistent identifier tying events to a specific visitor across sessions. It tells us which pages and features get used in aggregate; it does not build a profile of you individually.
No Google Analytics or any third-party analytics platform. No advertising cookies or ad-retargeting pixels (Meta, Google Ads, LinkedIn Insight, etc.). No cross-site tracking. No session-replay or heatmap tools. No third-party embeds that set their own cookies on XENA pages. XENA does not run advertising and does not sell or share browsing data with ad networks.
Because the session cookie is what keeps you logged in, blocking or deleting it will simply log you out — there's no separate "opt out but stay logged in" setting, since it isn't used for anything besides authentication. You can clear it any time via your browser's cookie settings.
If that ever changes — for example, if we introduce a genuine third-party analytics or marketing tool in future — we'll update this page and, where required, ask for your consent before it's active.
Questions: [email protected]. See also our Privacy Policy and Terms of Service.