XWidget

Cookies and Similar Tracking Technologies Policy

Last updated: July 21, 2026

This Cookies and Similar Tracking Technologies Policy (this "Policy") provides you with general information about cookies and similar tracking technologies (collectively, "Tracking Technologies") as well as how and for what purposes Appfluent, Inc. ("Appfluent", "we", "us" or "our") use such Tracking Technologies on our website xwidget.dev and the XWidget Cloud console (collectively, the "Websites").

Note: The XWidget SDK, which Customers integrate into their applications, does not use cookies or similar tracking technologies. Analytics data collected by the SDK is transmitted via standard HTTP requests. This Policy applies only to our Websites and the XWidget Cloud console.

Please take the time to read this Policy. If you have questions or comments, you are welcome to contact us at: privacy@appfluent.us.

What Are 'Cookies'?

Cookies are small files with pieces of information, normally consisting of just letters and numbers, which websites use when users visit them.

Software on the users' devices (for example, a web browser) can store cookies and send them back to the website the next time they visit, to make a specific function of the website work and to provide information about the user's activities on the website.

For What Purposes Are Cookies Being Used?

Cookies are used in numerous ways. For example, when analyzing traffic to a website or tracking users' browsing behavior. Cookies are widely used as they allow a website to recognize a user's device. Cookies and other similar technologies help websites to remember the visitors and their activities, for example, the user's login details, or the goods users wish to buy when they add goods to their online basket or proceed to the checkout on an internet shopping website.

What Are 'Session' and 'Persistent' Cookies?

"Session Cookies" are removed from your device once you close your browser session.

"Persistent Cookies" last for longer periods on your device — after you close your browser session.

A user can delete previously set persistent cookies manually or configure the browser settings to delete cookies, as further described below.

What Are 'First-party' and 'Third-party' Cookies?

First-party cookies are set directly by the website that the user is visiting. For the purpose of this Policy, these are cookies that are set directly by our Websites.

Third-party cookies are set by a domain other than the one visited by the user. For the purpose of this Policy, these are cookies that are set by service providers of our Websites.

What Are 'Similar Technologies'?

Functions usually performed by a cookie can be achieved by other means. This could include, for example, using certain characteristics to identify devices so that visits to a website can be analyzed.

Any technology that stores or accesses information on the user's device is relevant for this purpose, and therefore it includes, for example, HTML5 local storage, Local Shared Objects and fingerprinting techniques.

Additionally, technologies like scripts, tracking pixels and plugins, wherever these are used — are also considered as similar technologies.

Does Appfluent Use Tracking Technologies?

Yes, we do.

We use both Session Cookies and Persistent Cookies as part of your experience on our Websites so that we can facilitate the use of the Websites' features and tools, maintain authenticated sessions, and support the security of our Websites.

The cookies we use are strictly essential for the operation of our Websites. We do not use analytics, advertising, or other non-essential cookies or Tracking Technologies.

We have created a detailed Tracking Technologies table page, which is attached as an Appendix A to this Policy and is available here. The table will provide you with a clear and comprehensive image of the Tracking Technologies that we use.

When a Tracking Technology contains personal data, as indicated in Appendix A, then the Appfluent Privacy Policy applies as well.

No. We use only strictly essential cookies, which are necessary for the operation and security of our Websites and do not require your consent under applicable law. Because we do not use non-essential cookies or other Tracking Technologies, we do not display a cookie consent banner.

Can I Manage My Tracking Technologies Preferences?

Every browser allows you to manage your Tracking Technologies preferences, usually found in the "Help" or "Settings" sections of the web browser.

Here are some links to some commonly used web browsers:

To find out more about cookies, including how to see what cookies have been set, you can visit the following websites: www.aboutcookies.org and www.allaboutcookies.org.

Some web browsers offer a "Do Not Track" ("DNT") signal. A DNT signal is an HTTP header field indicating your preference for tracking your activities on our services or through cross-site user tracking.

Our Websites do not respond to DNT signals.

Will We Change This Policy?

We update this Policy when needed. Every time we change this Policy, we will post a notice on our Websites if our update includes substantial changes and obtain your consent once again, where required under applicable laws.

Appendix A: Tracking Technologies Table

Strictly Essential Cookies

These cookies are strictly essential for enabling your movement around the Websites, supporting the Websites' security features, and maintaining authenticated sessions.

This category of cookies cannot be disabled.

Name Provider Purpose Expiration
session_id Appfluent Used to maintain your authenticated session on the XWidget Cloud console. This cookie is HttpOnly and Secure. Persistent (until logout or session expiry)
__cf_bm Cloudflare Used by Cloudflare's bot management service to distinguish between humans and automated bots. This is necessary for the security and performance of the Websites. 30 minutes
cf_clearance Cloudflare Set by Cloudflare after a visitor has successfully completed a security challenge. Used to verify that the visitor has passed the challenge and to prevent repeated challenges on subsequent page loads. Persistent