This is an operational draft, not a substitute for advice from qualified Indonesian counsel. Commercial publication requires the owner/legal sign-off recorded in the Xspace launch checklist.
1. Current use
Xspace currently uses an essential HttpOnly session cookie to keep authenticated users signed in securely. The cookie is scoped to the service, uses SameSite protection, and is marked Secure in production.
Xspace also uses browser local storage to remember the selected light or dark-green theme. Theme storage does not identify you across unrelated websites.
2. No advertising cookies
As of this version, Xspace does not use third-party advertising cookies or cross-site behavioral tracking. Operational logs and service metrics are generated server-side for security, reliability, and diagnostics.
3. Controls and future changes
Blocking the essential session cookie prevents authenticated workspace features from working. You can clear cookies and local storage through browser settings, which signs you out and resets preferences.
If optional analytics or other non-essential browser tracking is introduced, Xspace will update this notice and provide any consent control required by applicable law before activation.