Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. Local storage, session storage, and similar technologies serve comparable purposes in web applications.

2. Cookie preferences

Continuing to browse without choosing a preference does not enable analytics or marketing cookies. Only necessary cookies and local storage required for sign-in, security, and core product behavior remain active until you make a choice.

XactaClaim uses a simple cookie preferences model. When you first visit, you can accept all optional categories, reject non-essential storage, or customize your choices. Your preferences are stored in localStorage under xactaclaim_cookie_preferences_v1.

A previous notice-only acknowledgement (xactaclaim_cookie_notice_ack) did not grant analytics consent. If you only dismissed the old banner, you will be asked for preferences again.

• Necessary (always on): Required for sign-in, security, portal sessions, theme and UI preferences, registration and legal acceptance state, and remembering your cookie choices. These cannot be disabled in the product without breaking core functionality.
• Analytics (optional): When you opt in and this deployment has analytics enabled, we use Firebase/Google Analytics to collect aggregated page views (route path only — not query strings, form fields, or claim content). Analytics does not run unless you accept it.
• Marketing (not currently used): XactaClaim does not currently use advertising cookies or marketing pixels. This category is reserved for future optional tools if we add them.

Rejecting non-essential cookies does not sign you out, clear Firebase Auth sessions, or block access to the workspace or client portal. You can change preferences later from this page or the Cookie Preferences link in site footers.

3. Necessary storage examples

• Staff authentication: Firebase Auth session tokens, cookies, and related browser storage needed for sign-in and secure navigation.
• Functional preferences: Theme (light/dark) and your saved cookie preference choices.
• Registration and legal acknowledgement: Selected registration plan choice, pending legal acceptance, and related sign-up flow state may use sessionStorage during registration.
• Client portal session restore: After a client verifies a portal PIN, the browser may store minimal re-verification data in sessionStorage for that claim. This session data expires after approximately twelve (12) hours, is re-verified with our servers before portal claim data is shown, and does not store claim payloads, documents, tasks, notification preferences, or staff Firebase tokens.

4. Third-Party Cookies

Limited third-party services may set cookies when you use related features:

• Stripe: Payment and billing flows may use cookies to prevent fraud and maintain checkout context.
• Google / Firebase: Authentication, hosting, and (when you opt in) aggregated usage analytics may use cookies or similar technologies.

We do not sell personal information collected through cookies or analytics page views.

5. Managing Cookies

Use the cookie preferences controls on this page or in site footers to update analytics choices. You can also control cookies through your browser settings or privacy extensions. Blocking necessary storage may prevent you from signing in, completing registration, restoring a client portal session, or using core features.

See our Privacy Policy for how we handle personal information.