Privacy Policy for XLXstok.com
Cookie Policy for XLXstok.com
Last Updated: 30 September 2025
1. What Are Cookies?
Cookies are small text files placed on your device (computer, phone, tablet) when you visit a website. They store preferences and other information to improve your browsing experience.
2. How We Use Cookies
XLXstok.com uses cookies and similar technologies to:
- Keep you logged-in
- Remember your preferences (language, dark mode, autoplay)
- Analyse traffic and performance
- Prevent fraud and abuse
- Deliver relevant content (video recommendations)
3. Types of Cookies We Set
| Category | Purpose | Lifespan | Essential? |
|---|---|---|---|
| Strictly Necessary | Session ID, CSRF token, age-verification | Session / 7 days | ✅ Yes |
| Functional | UI choices (language, filters, mute) | 12 months | ❌ No |
| Analytics | Google Analytics & self-hosted Matomo (anonymised IPs) | 24 months | ❌ No |
| Security | Abuse detection, repeated-fail login block | 30 minutes – 6 months | ✅ Yes |
4. Third-Party Cookies
- Payment providers (CCBill, Epoch, Paxum) – set when you reach the checkout page.
- Google reCAPTCHA – spam/abuse protection on registration & upload forms.
- Twitter, Reddit – only if you click “Share” buttons (no pre-loading).
These third parties have their own cookie policies; we do not control their settings.
5. Legal Bases (GDPR)
- Strictly necessary & security cookies: legitimate interest (site functionality, fraud prevention).
- Functional & analytics cookies: consent (via cookie banner).
- Third-party payment cookies: contract (to complete your purchase).
6. Consent Management
On your first visit you will see a cookie banner:
- “Accept all” – enables functional & analytics cookies.
- “Reject non-essential” – only necessary & security cookies.
- “Settings” – granular on/off switches.
You can change your choice anytime:
Privacy Settings (footer link) ➜ Cookie Preferences
Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.
7. Cookie Duration & Deletion
Most cookies expire automatically (see table).
You can also:
- Clear them manually in your browser settings.
- Use “Delete my account” – removes ID-linked analytics data within 24 h.
8. Google Analytics
We use Google Analytics 4 with:
- IP anonymisation enabled (last octet masked).
- Data retention: 24 months.
- No advertising features activated.
Google’s own privacy policy: https://policies.google.com/privacy
9. Do-Not-Track (DNT)
We honour the DNT browser signal; if DNT=1, analytics & functional cookies are disabled by default.
10. Browser Controls
All major browsers let you block or delete cookies:
Warning: disabling strictly necessary cookies will prevent login and break core features.
11. Changes to This Policy
We will notify registered users by e-mail of any material changes and update the “Last Updated” date above.
12. Contact
For questions about cookies, e-mail: privacy@xlxstok.com (DPO).