Cookie Policy
Effective Date: August 13, 2026
This Cookie Policy explains how Annuit, provided by Xaac, LLC, uses cookies and similar technologies in the Annuit web application. It supplements our Privacy Policy.
1. Categories of Cookies
We group cookies into two categories. Strictly necessary cookies are required for the Service to function and are always active. Analytics & Diagnostics cookies are optional and load only if you opt in.
- Strictly necessary. Your authentication session and the cookie that records your consent choice. The Service cannot work without these, so they are exempt from consent and cannot be switched off.
- Analytics & Diagnostics. The browser Sentry SDK (front-end error monitoring, performance tracing, and error-triggered session replay). This does not run unless you opt in, and you can withdraw consent at any time.
2. Cookies We Use
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| annuit_consent | Annuit (first-party) | Stores your cookie choice, the policy version it was made against, and when you made it. | Strictly necessary | 6 months |
| Supabase auth session cookies (e.g. sb-access-token, sb-refresh-token) | Supabase | Keep you signed in and maintain your authenticated session across requests. | Strictly necessary | Session / until sign-out or token expiry |
| Browser Sentry SDK (error monitoring, performance tracing, error-triggered session replay) | Sentry (Functional Software, Inc.) | Captures front-end errors, performance traces, and a session replay when an error occurs, to help us diagnose and fix problems. | Analytics & Diagnostics | Loaded only after you opt in; no cookie set unless enabled |
3. Managing Your Choice
When you first visit, a banner lets you accept or reject Analytics & Diagnostics with equal ease. You can change your choice at any time using the Cookie settings link in the site footer. We re-ask for your choice after six months or whenever this policy materially changes. Server-side error monitoring, which does not store anything on your device, runs under legitimate interest and is not governed by this consent choice.
4. Contact
Questions about this policy can be directed to us through the channels listed in our Privacy Policy.