Cookie Policy

CodeXtra Technologies Ltd uses cookies and similar technologies across the XtraKit website and its connected web applications. A cookie is a small value saved by a browser and sent to the relevant website. Local storage, session storage, cached app data and embedded-service identifiers can also retain information; they are not all cookies.

The technologies used vary by application and configuration. This policy covers XtraAuth and the connected XtraKit, POS, HR, attendance, storefront, payment, support and social tools. Mobile operating systems and push services may keep additional device or notification identifiers described in our Privacy Policy.

The shared sign-in flow uses a token cookie on supported XtraKit domains. Verification and onboarding flags help applications route an account through the appropriate steps. Authentication values are used to access protected services and are not advertising identifiers.

Examples found in the web apps include token, is_verified and onboarding_completed. Expiry depends on the login option and application configuration; signing out clears the session values used by the relevant app. A shared session does not grant access to every business or remove role checks. Do not disclose cookie values or session tokens.

Applications store interface preferences such as the selected theme, sidebar state, onboarding or walkthrough completion, and whether an app-install prompt was dismissed. Some apps use local or session storage for the selected workspace, form progress, cart, drafts or cached operational data where the feature supports it.

Local-storage values generally remain until the application changes them or you clear the site's data; session-storage values normally last for the relevant browser session. Browser caches and service-worker data can persist separately. Clearing storage can reset preferences and remove unsaved or locally cached work.

The XtraKit web application includes a PostHog integration for product-usage analytics when configured. Depending on its configuration, analytics can use cookies or browser storage to associate usage events. Browser and mobile notification features use OneSignal and permission-based device or subscription identifiers. Permission for notifications can be changed in the browser or operating system.

Support widgets can use visitor identifiers and technical information to connect chat sessions and support interactions. A support conversation and its visitor tracking can involve information in addition to cookies.

Payment checkout, authorized social connections, cloud-backup connections and other external pages or embeds may use their own cookies under the provider's policy. Examples include Paystack checkout, Meta and LinkedIn authorization. Those cookies can be controlled by the provider or by your browser. This policy does not claim that Google Analytics, advertising pixels or retargeting are enabled on every XtraKit page.

Use your browser's site-data and cookie settings to inspect, block or remove cookies and local storage. You can revoke browser-notification permission, sign out of shared accounts and revoke permissions in connected provider settings. Blocking essential authentication storage can prevent sign-in or interrupt payments or other workflows you requested.

Where a product offers an optional-technology preference control, use it to change that preference. This notice does not claim that a consent manager exists on every app or that optional analytics currently waits for consent in every configuration. If applicable law requires prior consent, the relevant optional technology must not be enabled without it. Contact us about an app-specific choice or concern.

Some browsers offer Global Privacy Control or Do Not Track signals. Their availability and handling depend on the browser and service; we do not promise universal recognition by every integration. Mandatory rights under applicable law remain available.

We review this notice as storage and integrations change. The update date identifies the latest version. For information about a particular app or storage value, contact info@xtrakit.com. Never include the value of an authentication cookie, a password or an access token.

The Privacy Policy explains how personal information is used, shared and retained. The Terms of Use explain responsibilities when using our applications.