This policy explains which cookies and similar storage xiran-ai.com uses, who sets them, why, and for how long. The controller is the owner named in the Legal Notice. Lawful bases are in the Privacy Policy.
What we ask for
We use technical storage the site needs in order to work. Google Analytics (Google, United States) loads only if you press “Accept all” or turn analytics on in “Settings”. If you press “Reject all”, the Google script is not inserted and the browser does not call googletagmanager.com or google-analytics.com, including Consent Mode cookieless pings.
You can change your mind from “Cookie settings” in the footer of every page. The choice expires after 24 months, and we ask again.
Storage we use
| Name | Owner | Purpose | Duration | Type |
|---|---|---|---|---|
xiran_analytics_consent (localStorage) |
xiran-ai.com | Remember whether you accepted or rejected analytics, and when | 24 months | Technical, exempt |
xiran-theme, xiran_user_lang (localStorage) |
xiran-ai.com | Remember the theme and language you choose | Until you delete them | Preference you request, exempt |
n8n-chat/sessionId (localStorage) |
xiran-ai.com / n8n | Keep the demo-chat session when you use it | Until you delete it | Technical, tied to the chat you open |
utm_*, xiran_initial_referrer, xiran_campaign_landing_sent (sessionStorage) |
xiran-ai.com | Know which campaign a contact request you submit came from. Not sent to Google if you reject analytics | Browser session | First party. Attached to the form so we can reply in context |
xiran_leads (localStorage, /demo only) |
xiran-ai.com | A local copy, on your device, of the trial you just submitted | Until you delete it | Functional, on your device |
_ga |
Tell browsers apart for statistics | 2 years | Analytics. Only after accept | |
_ga_JJ0YS2TB4G |
Keep GA4 session state | 2 years | Analytics. Only after accept | |
| Google Calendar cookies | Run the appointment widget | As set by Google | Third party. On the contact page the widget loads if you have accepted analytics. Otherwise it stays unloaded until you choose to load it there. |
Cookieless analytics
Cloudflare Web Analytics may measure traffic in aggregate without cookies. It does not build a profile of you on this site. The lawful basis is legitimate interest, described in the privacy policy.
How to reject or withdraw
- On the banner: “Reject all” or “Settings”.
- Later: “Cookie settings” in the footer of any page.
- You can also block cookies in the browser: Chrome (Settings > Privacy and security > Cookies), Firefox (Settings > Privacy & Security), Safari (Settings > Privacy) and Edge (Settings > Cookies and site permissions).
Google is in the United States. If you accept analytics, the transfer relies on the Data Privacy Framework where Google is certified, or on standard contractual clauses. Detail is in the Privacy Policy.