XPublishDraft — legal text pending
This page is a placeholder. The final wording will be provided by legal counsel before public launch.
Cookie Policy
What this site stores in your browser, and why. The inventory below reflects the code as it is today. The surrounding legal wording is a placeholder scaffold and is not yet legally binding.
1. Who is responsible
Placeholder — the data controller is XPublish Ltd., [XPUBLISH LTD REGISTERED ADDRESS]. Contact: [CONTACT EMAIL]. Final wording pending legal review.
2. Cookies this site sets
A cookie is a small text entry a website stores in your browser. This site sets the following, and no others.
| Name | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
| __Host-xlive-auth (and its .0 / .1 parts) | Supabase Auth, our sign-in provider | Keeps you signed in (session and refresh token), on the one site address you signed in on. | Up to 400 days, renewed while you use the site | Essential |
| __Host-xlive-auth-code-verifier | Supabase Auth | Completes a sign-in link or one-time code. | During sign-in only | Essential |
| NEXT_LOCALE | X-Live Books (author CMS language switcher) | Remembers the language you chose in the author CMS. | 1 year | Functional |
| xlive-reader-lang | X-Live Books (reader) | Remembers the language you chose in the reader. | 1 year | Functional |
| paige_hint | X-Live Books (the Ask Paige help button) | Remembers that you dismissed Paige's greeting balloon, so it is not shown again. | 180 days | Functional |
| xlive-consent | X-Live Books (this cookie notice) | Remembers that you have seen this notice, and — when choices are offered — the choices you made, with the date. | 6 months | Functional |
All of these are first-party cookies, set for xpublish.io and its subdomains (or for the single host you are on, where the site answers on another address). None of them is used for advertising or analytics.
3. What this site does not set
No advertising cookies, no analytics cookies, and no third-party scripts run on any xpublish.io page. Fonts are served from this site. If that changes, this page and the cookie notice will change with it, and you will be asked before any such cookie is set.
4. Browser storage that is not a cookie
The reader and the author CMS also keep a few things in your browser's local storage so they can pick up where you left off.
| What is stored | Where | How long |
|---|---|---|
| Reading position and reading settings, per book (xlive-live-…, xlive-reader-font / size / mode) | Reader | Until you clear your browser data |
| Purchase unlock cache for a book you bought (xlive-unlocked-…: the email you used at checkout; xlive-session-…: the checkout reference, removed once your purchase is linked to your account) | Reader | Until you clear your browser data; the checkout reference is removed automatically |
| Language choice (xlive-reader-language, cms-locale) | Reader, author CMS | Until you clear your browser data |
| Share-prompt and sign-in helpers (xlive-reader-shared-…, xlive-reader-otp-login and similar) | Reader | Some for the browser session only; others until you clear your browser data |
| Author preferences (xlive-tts-voice, share-link tags per book) | Author CMS | Until you clear your browser data |
These entries live in your browser's local storage, not in cookies. They stay on your device and are not sent to a server by themselves.
5. Content from other providers
When an author embeds a YouTube or Vimeo video in a chapter, the video player is loaded from that provider when you open that chapter, and the provider may set its own cookies under its own policy. Book files, cover images and sign-in are delivered through Supabase, the infrastructure provider this site runs on. Payments are handled on Stripe's own pages; Stripe sets no cookie on this site.
6. Your choices
Today the notice only informs you, because nothing non-essential is set. You can reopen it at any time from “Cookie settings” in the page footer. When the site offers choices, you will be able to accept or reject each category, and your choice will be stored for six months in the xlive-consent cookie. You can also delete cookies from your browser settings at any time; doing so signs you out and forgets your language.
7. Changes to this page
Placeholder — how and when changes to this policy are announced. Final wording pending legal review.
Questions in the meantime? Back to home
© 2026 XPublish Ltd. All rights reserved.