Cookie & Storage Notice
Last updated: 7 September 2026
This notice explains what the XBreakout marketing site (xbreakout.com) stores in your browser. In short: the site sets no tracking cookies, no advertising cookies, and no analytics. We load no third-party trackers, run no ad networks, and do not build a profile of you. The only thing the site keeps in your browser is a single first-party preference that remembers whether you chose the light or dark theme.
Cookies versus browser storage
"Cookies" are small files a website asks your browser to store and send back on each visit; they are often used to identify or track people across sites. This marketing site does not use cookies of that kind. Instead it uses one small piece of first-party localStorage — data that stays in your own browser, is never automatically transmitted anywhere, and holds no identifier. Under EU/UK ePrivacy rules and the Sri Lanka Personal Data Protection Act No. 9 of 2022, storage of this kind — used only to deliver a preference you asked for — is functional and does not require consent. Our obligation here is transparency, which this notice provides.
What we store
| Name | Type | Purpose | Set when | Duration | Consent |
|---|---|---|---|---|---|
| xbk-theme | First-party localStorage | Remembers your light/dark theme | You click the theme toggle | Until you clear your browser storage | Not required (functional/preference) |
This is the complete list of what the marketing site writes to your browser. The value is only ever "light" or "dark" — it contains no name, email, account reference, device identifier, or other information that could identify you, and it is not shared with anyone.
The "Try it live" demo
The marketing site offers a "Try it live" demo. Nothing loads automatically: the demo is only embedded when you click "Load live demo". When you do, your browser loads the XBreakout application from app.xbreakout.com inside a frame on the page. At that point you are interacting with the application, not just the marketing site — so the app may create a session in your browser and contact its own service providers in order to run, including Supabase (for authentication and data) and third-party market-data providers (Binance for crypto, Twelve Data for forex and metals) to draw live charts. The storage and processing that happen once the app loads are governed by the application's own terms. For full detail on what the app stores and which providers it contacts, please see our Privacy Policy.
Strictly-necessary security storage at the edge
The site is served over TLS from a virtual private server running the Caddy web server, hosted with Hostinger. Hosting or network-edge infrastructure of this kind can, in some configurations, set a strictly-necessary cookie or token purely to secure or route the connection (for example to maintain a secure session or protect against abuse). Any such storage is limited to what is technically required to deliver the page you requested, carries no analytics or advertising function, and is exempt from consent. The presence and exact behaviour of any edge-level security storage is confirmed at deployment; where one is set, it is strictly-necessary only.
How to clear or block storage
You are always in control of what your browser keeps. You can remove the theme preference at any time by clearing your browser's site data or localStorage for xbreakout.com, and you can prevent it from being stored at all by using your browser's privacy settings or private/incognito mode. Blocking or clearing this storage has no downside beyond convenience: the site simply forgets your theme choice and falls back to its default appearance until you set it again. No feature of the marketing site depends on the preference being stored.
Why there is no consent banner
We do not show a cookie-consent banner because the marketing site uses no storage that requires consent — only the functional theme preference described above, plus any strictly-necessary security storage at the edge. Interrupting you with a consent pop-up for storage that is exempt from consent would add friction without protecting you. If we ever introduce analytics, advertising, or any other non-essential or tracking storage, we will update this notice and put an appropriate consent mechanism in place before such storage is used, so that any non-exempt storage is set only with your prior consent.
Contact and review
If you have questions about this notice or about how XBreakout handles data in your browser, contact us at [ FILL IN: privacy email ]. XBreakout is operated by [ FILL IN: your legal entity / name ], [ FILL IN: your business address ], Sri Lanka. This notice should be read together with our Privacy Policy.
This notice is provided for transparency and should be reviewed by a qualified lawyer in the operator's jurisdiction before it is relied upon.