Cookies
Cookie policy.
This site is static and has one reserved area, the Projects and authorisations explorer: after a 20-second preview it asks you to sign in with a free 3Bee account, and two technical cookies keep you signed in. Nothing that profiles you runs until you allow it: with no answer to the banner, and with JavaScript blocked, the only third-party script that loads is the anti-bot check on the site's forms.
Two things need your consent, and neither one starts before you give it. Statistics loads Microsoft Clarity, which records the session to show which parts of a page get read; the contact form is masked, so what you type into it is not recorded. It also enables Google Analytics, which counts visits and the pages they reach. Marketing loads the LinkedIn Insight Tag, the Google tag for Google Ads, the Meta pixel and the OpenAI pixel for ads in ChatGPT, and keeps the click id of the ad you arrived from, so a request can be attributed to the campaign that produced it. Cloudflare Turnstile stays outside consent: it protects the form from abuse, which is our legitimate interest, and it reads your IP address for that sole purpose. Vercel Web Analytics counts page views and loading speed without a cookie and without any cross-site identifier, so it too rests on legitimate interest. XNatura's own measurement works the same way for whoever has not allowed statistics: it counts pages, how far they are scrolled and form steps, with no cookie and nothing stored on the device, so it rests on legitimate interest as well. With statistics allowed, it keeps a random id in your browser to count unique visitors; that id is never tied to your name or email.
| Name | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| __cf_bm, cf_clearance | Cloudflare Turnstile | Tells a person from a bot on the contact form and on the registration to the Projects and authorisations explorer. Loaded only on those two forms, when you start filling in the contact form or when the registration opens. | Necessary | Session |
| xn-consent | XNatura · localStorage | Remembers the answer you gave on the banner, so you are not asked again on every page. | Necessary | Until you clear it |
| — | Vercel Web Analytics | Counts page views and measures loading speed, aggregated. No cookie, no cross-site identifier. | Necessary | No cookie |
| — | XNatura | Counts page views, how far each page is scrolled and form steps, aggregated, for every visitor. No cookie, nothing stored on the device, nobody recognised. | Necessary | No cookie |
| xn_live_bar | XNatura · localStorage | Only for 3Bee staff who open the internal statistics bar: read-only access to this site's aggregate figures, valid 12 hours. Never set for other visitors. | Necessary | 12 hours |
| __Host-xn_auth | XNatura · xnatura.com | Keeps you signed in to the Projects and authorisations explorer with your 3Bee account: it holds the access token of 3Bee's account service, encrypted and readable by the server only, never by the page's scripts. It lasts as long as that token (7 days) and never more than 30 days after you sign in; Log out deletes it. | Necessary | Up to 7 days |
| __Host-xn_refresh | XNatura · xnatura.com | Renews that access when it expires, without asking for your password again: it holds the renewal token and the time you signed in, encrypted and readable by the server only. It lasts at most 30 days from the sign-in, renewals included; Log out deletes it. | Necessary | Up to 30 days |
| xn_mase_oauth | XNatura · xnatura.com | Holds the state, nonce and PKCE check of a Google sign-in to the explorer while you are on Google's page. Encrypted, readable by the server only, deleted when you come back. | Necessary | 10 minutes |
| xn_mase_g | XNatura · xnatura.com | Holds the Google identity just verified while you enter your company, the last step of a new account created with Google. Encrypted, readable by the server only. | Necessary | 15 minutes |
| ep_tracking_id | XNatura · localStorage | Only with statistics consent: a random id that recognises this browser on a return visit, so unique visitors can be counted. Never tied to your name or email. | Statistics | Until you clear it |
| ep_session_id, xn-landing-sent, xn-prev-path | XNatura · sessionStorage | Only with statistics consent: the current visit, whether its arrival (referring site, campaign) was already recorded, and the previous page, for the path between pages. | Statistics | Session |
| _clck, _clsk, CLID, MUID, ANONCHK, SM | Microsoft Clarity | Session recording and heatmaps: which parts of a page get read, and where a visit gets stuck. The contact form is masked. | Statistics | Up to 1 year |
| _ga, _ga_HEQ3V3X4LG | Google Analytics | Counts visits and the pages they reach. It arrives with the Google tag, and sets no cookie unless you allow statistics. | Statistics | Up to 13 months |
| xn-attribution | XNatura · sessionStorage | Keeps the click id of the ad you arrived from, for the length of this browser session, so a request can be attributed to its campaign. | Marketing | Session |
| bcookie, li_sugr, li_gc, lidc, UserMatchHistory, AnalyticsSyncHistory | LinkedIn Insight Tag | Measures the outcome of our LinkedIn campaigns and builds the audiences they are shown to. | Marketing | Up to 1 year |
| _gcl_au, _gcl_aw, _gcl_gb, IDE, test_cookie | Google Ads | Measures which Google Ads campaigns lead to a request and builds the audiences they are shown to. | Marketing | Up to 13 months |
| _fbp, _fbc, fr | Meta Pixel | Measures which Meta campaigns (Facebook, Instagram) lead to a visit or a request and builds the audiences they are shown to. | Marketing | Up to 3 months |
| __oppref, __obref | OpenAI (ChatGPT Ads) | Measures which of our ads in ChatGPT (OpenAI) lead to a visit, how far it gets read, a click to get in touch or a request: __oppref keeps the click id of the ad for 30 days, __obref a random id of this browser. | Marketing | Up to 1 year |
You can change your answer whenever you like: here, or from the footer of any page. A withdrawal stops anything new from loading; a script already running in this tab stops at your next page load.
Read our privacy policy