Cookie Policy

Draft for review — not yet legally verified.

1. Essential cookies

ExQlo uses essential cookies that are strictly necessary to operate the Service and keep it secure. Under the Privacy and Electronic Communications Regulations (PECR) these do not require consent.

• Authentication / session — keeps you signed in (set by Supabase auth).
• Trusted device — remembers a device you have approved, to streamline sign-in.
• Administrator security — supports two-factor authentication for staff accounts.
• Cookie choice — a small exqlo_consent cookie that records whether you accepted or declined analytics, so we don't ask again.

2. Analytics cookies (optional, consent-based)

We use Google Analytics 4 to understand how the site is used and improve it. These are optional analytics cookies:

• Nothing is set until you accept. We show a cookie banner and load no analytics and set no analytics cookies unless and until you choose "Accept".
• If you choose "Decline", no analytics cookies are set and Google Analytics is never loaded.
• We enable IP anonymisation and do not use these cookies for advertising.

3. Your choice and withdrawing consent

You can change your mind at any time. To withdraw analytics consent, clear this site's cookies in your browser (which removes the exqlo_consent record and any analytics cookies); the banner will then appear again so you can choose "Decline". You can also block cookies entirely through your browser settings.

4. Managing cookies

You can block or delete cookies through your browser settings. Blocking essential cookies may stop you from signing in or using parts of the Service.

5. Contact

Questions about cookies: tom@exqlo.com.