Cookie Policy

Last Updated: May 27, 2026

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. Local storage and similar technologies serve comparable purposes in web applications.

2. How XactaClaim Uses Cookies

XactaClaim uses cookies and similar storage for essential operation of the platform. We do not currently use advertising cookies, and we do not sell personal information collected through cookies.

  • Staff authentication: Firebase Auth session tokens, cookies, and related browser storage needed for sign-in and secure navigation.
  • Functional preferences: Remembering preferences such as theme (light/dark) and dismissing the cookie notice after you acknowledge it.
  • Registration and legal acknowledgement: Selected registration plan choice, pending legal acceptance, and related sign-up flow state may use sessionStorage during registration.
  • Client portal session restore: After a client verifies a portal PIN, the browser may store minimal re-verification data in sessionStorage for that claim (claim or portal identifier, PIN, and authentication timestamp). This session data expires after approximately twelve (12) hours, is re-verified with our servers before portal claim data is shown, and does not store claim payloads, documents, tasks, notification preferences, or staff Firebase tokens.

We do not currently run third-party analytics or marketing pixels in the application. If we add analytics in the future, we will update this policy.

3. Third-Party Cookies

Limited third-party services may set cookies when you use related features:

  • Stripe: Payment and billing flows may use cookies to prevent fraud and maintain checkout context.
  • Google / Firebase: Authentication and hosting may use secure cookies or tokens to keep you signed in.

4. Managing Cookies

You can control cookies through your browser settings. Rejecting essential cookies or clearing browser storage may prevent you from signing in, completing registration, restoring a client portal session, or using core features.

See our Privacy Policy for how we handle personal information.