1. What cookies and local storage are
Cookies are small files a website stores in your browser. Local storage (localStorage) works in a similar way: it saves information on your device so the site or app can work and remember your preferences. In this policy, "cookies" refers to both technologies.
2. What we use and why
Xurfin only uses strictly necessary and preference storage. We do not currently use analytics, advertising or third-party tracking cookies.
| Name | Where | Purpose | Duration |
|---|---|---|---|
| xf_cookies | xurfin.com | Remember your choice on this cookie notice | 12 months |
| crm_token | app.xurfin.com | Keep you signed in (strictly necessary) | Until you sign out, or 7 days |
| xf_lang, xf_currency | app.xurfin.com | Remember your language and your company's currency | Until you delete it |
| crm_user, crm_theme and interface preferences | app.xurfin.com | Remember your visible profile, light/dark theme and interface settings | Until you delete it |
3. Third-party resources
To display the site we load resources from external services: Google Fonts (typography) and Cloudflare (infrastructure and CDN). When these resources load, those providers may receive your IP address as a normal part of delivering content. If you choose "Continue with Google" in the app, Google will process your data under its own privacy policy.
4. Your privacy choices (United States)
- We do not sell or share your personal information, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA (CCPA) and similar US state privacy laws (for example in Virginia, Colorado, Connecticut, Utah and Texas). We do not use cookies for cross-context behavioral advertising.
- Global Privacy Control (GPC): we honor GPC browser signals as a valid request to opt out of the sale or sharing of personal information. Because we don't sell or share it today, no further action is needed on your part.
- Do Not Track: since we don't track you across sites, our behavior is the same whether or not your browser sends a Do Not Track signal.
- Depending on your state of residence, you may have the right to know, access, correct, delete and port your personal information, and to not be discriminated against for exercising these rights. To make a request, email contacto@xurfin.com. We will verify your request and respond within the timeframe required by law. You may use an authorized agent.
- Xurfin is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children.
5. How to manage cookies
- On the site's cookie notice you can accept or reject non-essential storage. Since we only use essential storage today, rejecting doesn't affect how the site works.
- You can delete or block cookies in your browser settings. Keep in mind that blocking essential storage on app.xurfin.com will prevent you from signing in.
- If we ever add analytics or marketing cookies, we will update this policy first and, where required by law, ask for your consent or give you a way to opt out before enabling them.
6. Visitors outside the United States
Xurfin is operated from Chile. If you are in Chile, the Spanish version of this policy applies, including your rights under Law No. 21,719. If you are in the European Economic Area or the United Kingdom, we only use strictly necessary storage, which does not require consent; you can still contact us to exercise your rights.
7. Personal data
The processing of personal data related to using the platform is described in the data protection section of our Terms of Service. Questions or requests: contacto@xurfin.com.
8. Changes to this policy
We will post any updates here with the date of the new version. If a change is material, we will highlight it on the site.