COOKIE
POLICY
How we use cookies and similar technologies
What Are Cookies
Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience by enabling essential features, analyzing site usage, and personalizing content.
This Cookie Policy explains how Xeito uses cookies and similar technologies, in compliance with GDPR and the Spanish Law 34/2002 on Information Society Services (LSSI).
Types of Cookies We Use
Essential Cookies
Required for the website to function properly. These cannot be disabled.
Session management and authentication
Analytics Cookies
Help us understand how visitors interact with our website. Only loaded after your explicit consent. Provided by Google Analytics 4 (Google Ireland Limited).
Google states that Google Analytics 4 does not log or store IP addresses. See our Privacy Policy for the legal basis of analytics.
Functional Cookies
Remember your preferences and personalize your experience. Set only on explicit user action.
Saved searches and job preferences
Advertising Cookies
Used only on public blog and marketing pages, and only after you accept advertising in the cookie banner. Without that consent, no ads load and no advertising cookies are set. With it, Google AdSense shows non-personalised ads and uses cookies and similar storage to deliver ads, limit repeats, measure ads and prevent fraud. Ads are never shown while you are signed in to Xeito, so signed-in Premium subscribers never see them.
Google AdSense never loads in the Xeito app (app.xeito.ai), never while you are signed in, and never on these pages: Privacy Policy, Legal Notice, Aviso legal, Withdrawal Rights, Pricing, Terms of Service, this Cookie Policy, AI Content Detection, the Help Center and its help articles. It also does not load on automatically generated job-listing and company pages. Advertising cookies already on your device stay until they expire or you withdraw consent, but no ad is requested on these pages.
Cookie table
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| __Secure-better-auth.session_token | Xeito (first-party, set by BetterAuth) | Authenticates your session after sign-in. HttpOnly, Secure, SameSite=Lax, Domain=.xeito.ai. In local development the cookie is named better-auth.session_token (no __Secure- prefix) because it is served over HTTP. | 7 days (rolling) | Essential |
| __Secure-better-auth.session_data | Xeito (first-party, set by BetterAuth) | Caches non-sensitive session metadata so we can avoid hitting the auth database on every request. HttpOnly, Secure, SameSite=Lax, Domain=.xeito.ai. | Matches the session token | Essential |
| __Secure-better-auth.dont_remember | Xeito (first-party, set by BetterAuth) | Set only when you sign in without "remember me", so the session ends when you close the browser. HttpOnly, Secure, SameSite=Lax. | Session | Essential |
| better-auth.state_*, better-auth.pkce_* | Xeito (first-party, set by BetterAuth) | Short-lived CSRF state and PKCE verifier cookies used during OAuth sign-in flows (Google, GitHub, LinkedIn) and email-verification redirects. HttpOnly, Secure, SameSite=Lax. Deleted as soon as the OAuth round-trip completes. | 10 minutes | Essential |
| xeito-consent | Xeito, xeito.ai (this site only) | Stores your cookie choices, including a rejection, so we do not ask again | 1 year | Essential |
| klaro | Xeito, .xeito.ai | Stores the same choices for our consent manager | 1 year | Essential |
| xeito-locale | Xeito, xeito.ai | Remembers the language of the last page you viewed, so the site opens in that language next time. Set on every page view; if no language is stored, the home page sets English | 1 year | Essential |
| xeito_adblock_dismissed | Xeito | Remembers that you closed the ad-blocker notice (sessionStorage) | Until the tab closes | Essential |
| cf_clearance | Cloudflare, Inc., .xeito.ai | Records that your browser passed a Cloudflare security check, so you are not challenged again | 1 year | Essential |
| __cf_bm | Cloudflare | Bot protection. May be set only while Cloudflare bot protection is active (not observed by us) | 30 minutes (per Cloudflare) | Essential |
| _cfuvid | Cloudflare | Tells apart visitors who share an IP address, for rate limiting. May be set only if a rate-limiting rule uses it (not observed by us) | Session | Essential |
| __stripe_mid | Stripe | Machine identifier for fraud detection. Set only on payment pages. | 1 year | Essential |
| __stripe_sid | Stripe | Session identifier for fraud detection. Set only on payment pages. | 30 minutes | Essential |
| m | Stripe | Device fingerprint for fraud prevention. Set only on payment pages. | 2 years | Essential |
| _ga | Google Ireland Limited (Google Analytics), .xeito.ai | Distinguishes visitors | Google sets 2 years; your browser may shorten this | Analytics |
| _ga_<property ID> | Google Ireland Limited (Google Analytics), .xeito.ai | Keeps session state (on xeito.ai: _ga_HMGTQSQ3Q7) | Same as _ga | Analytics |
| __eoi | Google (AdSense), .xeito.ai | Frequency capping, ad measurement and fraud prevention | 180 days | Advertising. Deleted when you refuse or withdraw. |
| __gads, __gpi | Google (AdSense), xeito.ai | May be set by AdSense to deliver and measure ads; not observed in our 24 October 2026 measurement | __gads: 13 months per Google; __gpi: as set by Google | Advertising. Deleted when you refuse or withdraw. |
| google_* | Google AdSense, xeito.ai | AdSense settings in localStorage (seen: google_adsense_settings, google_auto_fc_cmp_setting) | Until removed; removed when you refuse or withdraw | Advertising |
| IDE (doubleclick.net) | Cookies on Google's own domains, for example IDE on doubleclick.net. Google says IDE is used to show Google ads on non-Google sites. With non-personalised ads, cookies are still used for frequency capping and aggregated reporting. Not observed by us; we cannot delete them, but you can in your browser | Per Google: IDE 13 months in the EEA | Advertising |
Managing Cookies
You can control and manage cookies through your browser settings. Here's how:
Chrome: View instructions
Firefox: View instructions
Safari: View instructions
Edge: View instructions
Note: Disabling certain cookies may affect the functionality of our website.
Third-Party Cookies
Some third-party services may place cookies on your device when you use our website:
Google Analytics for website analytics
Google AdSense for advertising (only with your consent, and only on public blog and marketing pages)
LinkedIn for professional networking features
Payment processors for transaction security
Contact Us
If you have any questions about our Cookie Policy, please contact us:
Email: [email protected]