Legal

Cookie Policy

Last updated: April 25, 2026

This Cookie Policy explains how glabs AI ("we", "us", or "our") uses cookies and similar technologies on xmdbot and our related websites and applications (the "Service"). It should be read alongside our Privacy Policy.

1. What Are Cookies?

Cookies are small text files that websites place on your device to store information. Similar technologies include local storage, session storage, and pixels. Throughout this policy we refer to all of these simply as "cookies".

Cookies can be:

  • First-party — set by the site you are visiting.
  • Third-party — set by another domain.
  • Session — deleted when you close your browser.
  • Persistent — remain until they expire or you delete them.

2. Cookies We Use

We aim to use only what we need. We use two categories of cookies:

2.1 Strictly Necessary

These cookies are required for the Service to function. They cannot be disabled.

| Purpose | Examples | | ------------------------ | ------------------------------------ | | Authentication & session | Session tokens, CSRF tokens | | Security | Rate-limiting, bot-protection tokens | | Preferences | Language, theme (light/dark) |

2.2 Product Analytics (PostHog)

We use PostHog as our sole analytics provider to understand how people use the Service so we can improve it. PostHog may set first-party cookies or use local storage to:

  • Generate a pseudonymous user identifier;
  • Record events (page views, feature usage, clicks);
  • Measure funnels and retention.

We do not use advertising, marketing, or cross-site tracking cookies today. We do not use Google Analytics, Meta Pixel, or similar third-party trackers.

2.3 Advertising (future)

The Service is currently fully free and contains no advertising cookies. We may introduce advertising in the future. If we do, we will update this policy before any advertising cookies are set, describe the categories and partners involved, and — where required — ask for your consent.

3. How We Use Cookie Data

We use cookie-derived data to:

  • Keep you signed in and secure your session;
  • Remember your preferences;
  • Analyze product usage and improve the Service (PostHog);
  • Detect and prevent abuse.

4. Your Choices

You can control cookies in several ways:

  • Cookie banner: where required by law, you will see a banner that lets you accept or reject non-essential cookies. Your choice is saved and can be changed at any time.
  • Browser settings: most browsers let you block or delete cookies. Blocking strictly necessary cookies will break sign-in and other core features.
  • PostHog opt-out: you can opt out of PostHog analytics at any time via the cookie banner or by contacting us at [email protected].
  • "Do Not Track": we honor standardized opt-out signals where required by law.

5. Third Parties

PostHog processes data as our sub-processor under a data-processing agreement. See posthog.com/privacy for details on their practices.

If you connect your X (Twitter) account, X may set cookies during the OAuth flow. Those cookies are governed by X's own cookie policy.

6. Retention

  • Session cookies are deleted when you close your browser.
  • Persistent cookies expire after a period ranging from a few days to a maximum of 12 months, depending on the cookie's purpose.
  • PostHog identifiers are retained per PostHog's retention configuration.

7. Changes to This Policy

We may update this Cookie Policy to reflect changes to our technologies or legal requirements. We will post the updated version on this page and update the "Last updated" date.

8. Contact Us

Questions about cookies? Contact us at [email protected].