Trust Center

Cookie Policy

Which cookies this site sets. There is no advertising or cross-site tracking on it.

Last updated September 2026

In plain language

This lists every cookie this site sets. There is no advertising and no cross-site tracking. Two external services are involved and both are named: Cloudflare Turnstile, which checks a form is being filled in by a person, and Google Analytics, which loads only if you agree.

Cookies help websites function. This policy says which ones this site sets, and it is short because the answer is: very few.

There is no advertising network on this site, no cross-site tracking, no session recording and no retargeting. There are two external services, and both are named below: Cloudflare Turnstile, which checks that a form is being filled in by a person, and Google Analytics, which counts page views. Analytics loads only if you agree to it — that is what the banner at the bottom of the page is for, and declining is one click.

What this site sets

  • Analytics — _ga and _ga_REDNVV9Z0J, set by Google Analytics only after you agree. They count visits and which pages get read. They last two years, and you can decline or clear them at any time.
  • Verification — Cloudflare Turnstile checks that a form is being submitted by a person rather than a script. It receives your IP address and may set a short-lived token. It runs on form pages whether or not you accept analytics, because without it the forms fill with spam.
  • Session cookies — only if you log in, which almost nobody does. They keep you signed in and expire when the browser closes.
  • Form state — short-lived, so a submitted form does not resubmit if you refresh.
  • Security tokens — set when a form is shown, to verify the submission came from this site.

What cookies are

Small text files placed on your device when you visit a website, letting it remember something about your visit. They do not generally identify you personally.

What this site does not set

  • Advertising or retargeting cookies
  • Cross-site tracking of any kind
  • Social media pixels
  • Session recording or heatmap tools

None of the above is a euphemism for something we do quietly. If any of it changes, this page changes first and the date at the top moves with it.

Blocking them

You can block cookies in your browser. Forms on this site will still work, though you may be asked to complete one again after a refresh. Nothing else breaks.

Embedded content

Where we embed something from another service — a video, for example — that service may set its own cookies under its own policy. We tell you on the page where that happens rather than leaving you to find out.

Your privacy

Information collected through cookies that constitutes personal data is handled in accordance with our Privacy Policy and applicable data protection law.

Changes to this policy

If our use of cookies changes, this page is updated with a revised date.

Contact us

If you have questions about this policy or about how cookies are used on our website:

We aim to reply within three working days.

What this does not cover

This page does not cover personal data collected through the cookies it lists — the Privacy Policy governs that. It does not cover cookies set by an embedded third-party service, such as a video player, which follow that service's own policy, stated on the page where it appears.

Questions we get asked

Questions about this policy

Why is there no cookie banner?

Because analytics arrived on this site in September 2026, and analytics cookies need consent. Nothing loads until you choose, and declining is one click.

Does XONIK use Google Analytics?

Yes, one: Google Analytics. It counts page views and which pages get read. It runs only after you agree, and you can decline or change your mind at any time.

Can I disable cookies?

Yes, through your browser. Forms will still work; you may occasionally have to complete one twice.

Will this change?

Possibly. If we add anything that sets a non-essential cookie, this page is updated and a consent mechanism is added before it goes live — not after.

Something here unclear?

These pages are meant to be readable rather than defensible. If a clause does not make sense, tell us — that is usually our fault.