Legal

Cookie policy

Last updated: 6 October 2026

Cookies & similar technologies

PainXML is a static web application, so we store most preferences in your browser's local storage rather than in cookies. Where this policy refers to 'cookies', it also covers equivalent local-storage and script-based tracking technologies under the ePrivacy Directive and GDPR.

Strictly necessary (always active)

These are essential for the app to work and are exempt from consent: your Supabase sign-in session token, your theme preference (painxml-theme), and your consent choice itself (painxml-consent). They are stored locally on your device and are never used for advertising or cross-site tracking.

Analytics (opt-in)

With your consent we load Google Analytics, which sets first-party cookies (_ga and _ga_<id>) to report anonymous, aggregated page-view statistics. We never send payment files, IBANs, BICs, or any transaction data to Google. The Google script is only loaded after you opt in, and is removed if you withdraw consent.

How to manage or withdraw consent

You can accept or reject categories from the consent banner on your first visit, and change your choices at any time via the 'Cookie settings' button in the footer. Withdrawing consent immediately removes the analytics script and stops further collection.

Contact

Questions about this policy or your data can be sent to [email protected]. See our Privacy Policy for details of your rights under the GDPR.