Cookie Notice

Cookies are small text files placed on your device when you visit a website. They allow the site to remember things like your sign-in state, your preferences, and the pages you’ve already viewed during the current session. Modern web apps also use related technologies — localStorage, sessionStorage, IndexedDB, and pixel tags — that work similarly. We use the term “cookies” throughout this notice to cover all of them.

We use cookies for four purposes:

• Keep you signed in across the trading workspace, the catalog, and the impact pages.
• Remember the wallet currency, density mode, language, and theme you’ve picked.
• Detect suspicious sign-in behaviour and prevent fraud on payment and trading flows.
• Measure how features are used at an aggregate level so we can improve them.

We do not use cookies to build advertising profiles, and we do not share cookie data with advertising networks.

We group cookies into three categories:

Strictly necessary

Required for the platform to operate — sign-in, session, fraud protection, jurisdictional gating, CSRF protection. These cannot be switched off in our consent banner.

Functional

Remember your preferences (language, density mode, dark/light theme, wallet display currency). Optional but improve the experience.

Performance & analytics

Help us understand which features are used and where users get stuck. We use a self-hosted analytics setup with IP-address truncation and no cross-site tracking.

The current cookie inventory is maintained as a JSON file and surfaced on this page on every release. As of the effective date above, we set the following first-party cookies:

xt-session

Strictly necessary. Authenticated session. Cleared on sign-out or after 30 minutes of inactivity.

xt-csrf

Strictly necessary. CSRF token for state-changing requests. Session only.

xt-jur

Strictly necessary. Detected jurisdiction code used for feature gating. 30 days.

xt-prefs

Functional. Language, density, theme. 6 months.

xt-cart

Functional. Anonymous shop cart so items survive across navigation while signed out. Session only.

xt-watch

Functional. Anonymous watchlist (markets). Session only.

xt-analytics

Performance. Anonymous client identifier for product analytics. 13 months.

On your first visit you see a consent banner where you can accept all, reject non-essential, or set per-category preferences. You can change your preferences at any time from Account → Privacy.

Your browser may also offer controls to block or delete cookies; details vary by browser. Note that disabling strictly-necessary cookies will prevent sign-in and several core features from working.

A small number of integrated services set their own cookies on our domains. These are governed by the third party’s own cookie policy:

• Persona / Sumsub — identity-verification iframe during sign-up. Active only on the KYC step.
• Stripe / Adyen / Alipay / WeChat Pay — payment processing iframes during deposit. Active only on the deposit step.
• Mailtrap (or our production email provider) — transactional email pixel for delivery telemetry.

We do not embed advertising or social-media tracking cookies anywhere on the platform.

We may update this Cookie Notice when our cookie usage changes. The current version is always at this URL with an effective date and version number. Where the change is material (a new category or a new third party), we will notify you via in-product banner before it takes effect.

For privacy or cookie questions, contact privacy@xiaomicrowdtrading.com. For wider data-protection information, see our Privacy Notice.