Cookie Policy

This page lists everything the XM Textiles e-shop stores in your browser — every cookie, every local-storage entry — what each one is for and how long it lives. No hidden trackers, no third-party advertising.

Last updated: 15 July 2026

1. What cookies and browser storage are

Cookies are small text files a website places in your browser; the browser sends them back with every request, which is how the shop recognises your signed-in session. Local storage is a similar browser feature websites can read, but its contents never leave your device unless the site sends them.

2. How this shop uses them

Today the shop uses only strictly necessary cookies and storage — the minimum needed to sign you in, keep your cart and remember your cookie choice. We use no advertising or marketing cookies and no third party sets cookies on this site.

An analytics category exists in the consent banner because we plan to add privacy-respecting usage analytics after launch. Nothing in that category runs unless you have opted in — the shop checks your stored choice before loading any analytics code.

3. Cookies we set

Name	Purpose	Duration
`xm_at`	Strictly necessary. httpOnly sign-in token that authenticates you to the shop while you are logged in. Set only when you sign in.	about 15 minutes
`xm_rt`	Strictly necessary. httpOnly renewal token that quietly refreshes your session so you stay signed in. Set only when you sign in; not readable by scripts.	up to 30 days
`xm-consent-v1`	Strictly necessary. Remembers the choice you made in the cookie banner so we do not ask again on every visit.	6 months

4. Browser storage we use

These local-storage entries stay on your device and are not sent to us as you browse (your cart is transmitted only when you place an order):

xm-cart-v1 — the contents of your shopping cart, so it survives closing the browser.
xm-compare-v1 — the fabrics you added to the compare list.
xm-search-recent-v1 — your recent searches, shown when you reopen the search panel.
xm-assistant-view — remembers how you left the homepage assistant (open or closed).
xm-assistant-session — a temporary id for your homepage-assistant conversation; deleted when the browser tab session ends. (session storage — cleared when the browser session ends)

5. Analytics — only with your consent

We run no analytics today. When analytics launch, they will load only for visitors who chose “Accept all” or switched analytics on in Cookie settings, and this page will be updated with the exact cookies involved before anything is set.

6. Managing your choice

You can change your decision at any time — open the settings and flip the analytics switch; the change takes effect immediately:

You can also delete or block cookies in your browser settings. Blocking the strictly necessary ones will prevent signing in and keeping a cart; nothing else breaks.

How we handle the personal data behind these cookies is described in our Privacy Policy.