Xeep Logo

Cookie Policy

Last Updated: 2025-10-24
Version 1.0
Loading cookie preferences...

This Cookie Policy explains how XEEP PLT (Company Registration No. 202504002688) ("Xeep," "we," "us," or "our") uses cookies and similar tracking technologies on our website at xeep.io and related web services. This policy should be read in conjunction with our Privacy Policy.

By using our website and web-based services, you consent to the use of cookies as described in this Cookie Policy. You have the right to manage your cookie preferences as explained below.

What are cookies? Small text files stored on your device. They can be persistent or session cookies.

1. Types of Cookies We Use

1.1 Essential Cookies (Always Active)

These cookies are strictly necessary for our website to function and cannot be switched off.

  • xeep_auth_token — Session presence flag. Duration: 1 day. First-party.
  • xeep_csrf_token — CSRF protection. Duration: session. First-party, HTTP-only.
  • xeep_consent — Cookie consent preferences. Duration: 1 year. First-party.
  • xeep_theme — Light, dark, or system theme. Duration: 1 year. First-party.
  • xeep_analytics_session — Anonymous usage analytics. Duration: 30 days. First-party. Cannot be linked to wellness data.

1.4 Marketing Cookies (Not Currently Used)

Xeep does not use marketing, advertising, or remarketing cookies.

2. Third-Party Cookies

3. How We Use Cookies

We use cookies for authentication and security, remembering preferences, anonymous usage patterns (with consent), and performance monitoring (with consent).

When you first visit, a banner lets you Accept All, choose Essential Only, or Customize. Change preferences later at Cookie Settings or Settings → Privacy.

5. Local Storage and Similar Technologies

We may use local storage and session storage for dashboard caching, UI state, and form preservation. These are not sent with every request.

6. Mobile Applications

This Cookie Policy applies only to xeep.io. Native iOS and Android apps do not use browser cookies. Mobile storage is covered by the Privacy Policy.

7. Updates

Material cookie changes are emailed to registered users with a 30-day notice. Non-material changes update the Last Updated date.

8. Contact

This policy is designed to comply with Malaysia PDPA 2010. EU visitors receive GDPR-aligned consent controls for non-essential cookies.

NameCategoryEssentialDurationProvider
xeep_auth_tokenAuthenticationYes1 dayXeep
xeep_csrf_tokenSecurityYesSessionXeep
xeep_consentEssentialYes1 yearXeep
xeep_themePreferenceNo1 yearXeep
xeep_analytics_sessionAnalyticsNo30 daysXeep
_GRECAPTCHASecurityYes6 monthsGoogle

Related: Privacy Policy · Terms of Service

Questions: [email protected] · Privacy Policy · Terms of Service