What these technologies are
Cookies are small text files a website asks your browser to store. Similar technologies, including local storage and session storage, can remember information in your browser without using a traditional cookie.
XPET uses these technologies when they are needed to secure your account, maintain a requested workflow, remember an interface choice, or keep a cart available during a browser session. We do not use them to sell personal information or to support cross-context behavioral advertising.
A cookie policy describes storage on your device. For the broader picture of how XPET collects, uses, and protects personal and pet health information, read our Privacy Policy.
Technology ledger
This ledger reflects the technologies currently found in XPET's application code and provider configuration. Retention can be shorter when you sign out, finish a workflow, or clear browser data.
| Technology | Purpose | Type and category | Retention |
|---|---|---|---|
wos-sessionXPET / WorkOS | Keeps an authenticated account signed in using an encrypted session. | Cookie Necessary | Up to 400 days by default, or earlier at sign-out or session expiry. |
wos-auth-verifierXPET / WorkOS | Protects the sign-in round trip against interception and request forgery. | Cookie Necessary | Short-lived; removed after the authentication callback completes. |
CookieConsentCookiebot | Will remember consent choices after XPET enables optional technologies. | Cookie Necessary | Up to 12 months after the consent banner is enabled. |
xpet:cartItemsXPET | Keeps items in the marketplace cart while the browser tab remains open. | Session storage Necessary | For the current browser-tab session. |
theme and sidebarPinnedXPET | Remembers interface choices a signed-in user makes. | Local storage User-requested preference | Until the choice changes or browser storage is cleared. |
XPET onboarding and workflow state XPET | Carries invitation, pet setup, and in-progress health-record details through a requested workflow. | Local storage Necessary | Until the workflow completes, the app removes it, or browser storage is cleared. |
wos-sessionXPET / WorkOS
Keeps an authenticated account signed in using an encrypted session.
- Type and category
- Cookie · Necessary
- Retention
- Up to 400 days by default, or earlier at sign-out or session expiry.
wos-auth-verifierXPET / WorkOS
Protects the sign-in round trip against interception and request forgery.
- Type and category
- Cookie · Necessary
- Retention
- Short-lived; removed after the authentication callback completes.
CookieConsentCookiebot
Will remember consent choices after XPET enables optional technologies.
- Type and category
- Cookie · Necessary
- Retention
- Up to 12 months after the consent banner is enabled.
xpet:cartItemsXPET
Keeps items in the marketplace cart while the browser tab remains open.
- Type and category
- Session storage · Necessary
- Retention
- For the current browser-tab session.
theme and sidebarPinnedXPET
Remembers interface choices a signed-in user makes.
- Type and category
- Local storage · User-requested preference
- Retention
- Until the choice changes or browser storage is cleared.
XPET
Carries invitation, pet setup, and in-progress health-record details through a requested workflow.
- Type and category
- Local storage · Necessary
- Retention
- Until the workflow completes, the app removes it, or browser storage is cleared.
Latest Cookiebot scan
Once configured, this declaration updates from XPET's reviewed domain scan.
Live scan details are not configured yet.
The technology ledger above is XPET's current disclosure. A live Cookiebot declaration will appear here after the production domain completes its first reviewed scan.
How we classify technologies
Necessary
In use
Supports security, account sessions, requested workflows, cart continuity, and consent records. Blocking these technologies may prevent parts of XPET from working.
Preferences
Only when requested
Remembers an interface choice you make, such as keeping the sidebar open. These choices are not used to track activity across websites.
Statistics
Off
Would measure how visitors use XPET. XPET does not currently load a product analytics or audience measurement provider.
Marketing
Off
Would support advertising, retargeting, or cross-site measurement. XPET does not currently use these technologies.
If XPET introduces a statistics or marketing provider, it will remain blocked until the visitor makes an applicable consent choice. The ledger and this policy will be updated before that provider is enabled.
Service providers
XPET is responsible for deciding why these technologies are used. Two service providers currently support browser-storage functions:
Cookiebot by Usercentrics
Scans for browser technologies and will record consent choices when the optional-technology banner is enabled.
XPET also uses service providers to operate cloud data and payment features. They are described in the Privacy Policy and will be added to this ledger if a reviewed browser audit confirms that they store or access information on your device.
Your choices
Cookie settings
XPET's consent banner is not active because optional tracking is not in use. When optional technologies are introduced, the banner will let you reject them, allow selected categories, or allow all. You will be able to change or withdraw that choice from this page.
Browser controls
Most browsers let you inspect, delete, or block cookies and site data. If you block necessary storage, sign-in, security checks, carts, or other requested features may stop working. Browser help documentation explains how to manage these controls for your device.
Global Privacy Control
Global Privacy Control, or GPC, is a browser signal that can communicate a request to opt out of the sale or sharing of personal information. XPET does not sell personal information or use cross-context behavioral advertising. If those practices change, XPET will recognize applicable GPC signals and keep affected optional technologies disabled.
Changes and contact
We may update this policy when our technology, providers, or legal obligations change. Material changes will be identified by a new last-updated date and, where appropriate, a notice in the product. When a change affects consent, we will ask visitors to make a new choice.
This page is intended to provide a clear operational disclosure. It does not replace advice from qualified privacy counsel about XPET's specific legal obligations.