Cookies Policy
This policy explains the cookies and similar technologies XpertOS uses, and why. It covers the XpertOS application and these public pages. The Xtremepush website at xtremepush.com has its own cookies policy.
The short version
XpertOS uses only what it needs to keep you signed in and remember your settings. It uses no analytics, advertising or social-media cookies, and no tracking pixels. Because everything it stores is strictly necessary or a preference you set, it does not ask for cookie consent.
Cookies
XpertOS sets two first-party cookies, and only when you sign in:
| Cookie | Purpose | Lasts |
|---|---|---|
access_token |
Keeps you signed in to XpertOS. Strictly necessary. | 15 minutes by default, renewed while you use the app |
refresh_token |
Renews your sign-in without asking for your password again. Strictly necessary. | 7 days by default, or until you sign out |
Both are HttpOnly (web pages cannot read them), Secure over HTTPS, and SameSite=Strict (never sent to other websites). They are not shared with anyone else.
The public pages — this one, the homepage, the privacy policy and the others linked below — set no cookies at all.
Browser storage
XpertOS also keeps some information in your browser's local storage. This data stays on your device and is not used for tracking:
- Sign-in state — when your session expires, and the name, email address, organisation and role shown in the app;
- Preferences — your theme (light, dim or dark) and interface choices such as panel widths and dismissed prompts.
Signing out removes the sign-in state. The public pages only read it, to show "Open XpertOS" instead of "Sign in" and to take a signed-in visitor straight to the app.
Third parties
XpertOS loads its typefaces from Google Fonts. Your browser requests them from Google's servers, so Google receives your IP address and browser details as it would for any web request. Google Fonts does not set cookies. See Google's privacy policy.
When you connect a service such as Google or Slack, you sign in on that service's own pages, under its own cookies and policies.
Controlling cookies
You can block or delete cookies in your browser settings. If you block the two sign-in cookies, you will not be able to sign in to XpertOS; the public pages keep working. Clearing your browser's site data removes the local storage described above.
Changes and contact
We will update this page if XpertOS starts using a new cookie or storage item, and change the date below. Questions: our Data Protection Officer at dpo@xtremepush.com.