Cookie Policy
Last updated: July 23, 2026
1. What this policy covers
This Cookie Policy explains how Xenon Ophthalmics, Inc. uses cookies, pixels, tags, software development kits, session-replay tools, and similar technologies ("cookies") on xophthalmics.com. It supplements our Privacy Policy.
2. Your consent and control
With the exception of strictly necessary cookies, we do not place or activate cookies until you consent. You provide consent through our banner or Preferences Center, where all non-essential categories are off by default. You may change or withdraw your choices at any time via the "Cookie Preferences" link in our footer. We honor recognized browser opt-out signals, including Global Privacy Control (GPC).
How that works in practice on this site: the code for every non-essential category is withheld from your browser entirely until you turn that category on, so there is nothing to opt out of before you choose. When your browser sends a GPC signal, we detect it, we tell you so in the Preferences Center, and nothing in Marketing/Advertising runs unless you turn it on yourself. When you turn a category off, that provider's cookies are deleted from your browser immediately.
3. Categories of cookies we use
The cookie details table below lists each cookie by category, including its provider, purpose, type, and duration. Only strictly necessary cookies are active by default; all other categories are off until you turn them on. Marketing/Advertising may involve a "sale"/"sharing" or "targeted advertising" under certain state laws.
| Category | Provider | Cookie names | Party | Purpose | Type | Duration | Provider privacy policy |
|---|---|---|---|---|---|---|---|
| Strictly Necessary | Xenon Ophthalmics | xo_consent_v1 | First | Runs the site and remembers your cookie choice | Browser local storage | 12 months | Privacy Policy |
| Strictly Necessary | Cloudflare | __cf_bm | Third | Distinguishes humans from bots to protect the site | HTTP | About 30 minutes | cloudflare.com/privacypolicy |
| Strictly Necessary | Square (order pages only) | Set by Square within its own payment frames | Third | Payment security and fraud prevention during checkout | HTTP | Set by Square | squareup.com/legal/privacy |
| Analytics/Performance | Google (Google Analytics) | _ga, _ga_4XF4J9Z8MC | Third | Measures how the site is used, in aggregate | HTTP | Up to 2 years | policies.google.com/privacy |
| Translation | Google (Google Translate) | googtrans | First-party cookie set by Google's script | Translates pages into other languages and remembers the language you chose | HTTP | Until you close your browser | policies.google.com/privacy |
| Marketing/Advertising | HubSpot | hubspotutk | Third | Identifies your browser to HubSpot | HTTP | About 6 months | legal.hubspot.com/privacy-policy |
| Marketing/Advertising | HubSpot | __hstc | Third | Records visit history for our account | HTTP | About 6 months | legal.hubspot.com/privacy-policy |
| Marketing/Advertising | HubSpot | __hssc | Third | Tracks the current session | HTTP | About 30 minutes | legal.hubspot.com/privacy-policy |
| Marketing/Advertising | HubSpot | __hssrc | Third | Marks the start of a session | HTTP | Until you close your browser | legal.hubspot.com/privacy-policy |
Two things worth naming plainly. xo_consent_v1 is a browser local storage entry rather than an HTTP cookie, which means it is never transmitted to any server, including ours. The Translation and Marketing cookies only ever exist after you turn those categories on, and they are deleted from your browser the moment you turn them back off.
4. Sale/sharing and your state privacy rights
Depending on your state of residence, you may have rights to opt out of sale/sharing and targeted advertising, and to access, correct, or delete your data. To exercise these rights, use our Do Not Sell or Share My Personal Information control, which turns the Marketing/Advertising category off and deletes its cookies immediately, or see our Privacy Policy.
5. No sensitive information
This is a business-to-business site used for marketing. We do not seek or intentionally collect sensitive personal information through this site, and you should not submit it to us.
6. How to manage cookies
You can manage preferences through our Preferences Center and through your browser settings. Disabling some cookies may affect site functionality.
7. Changes and contact
We will update this policy as our practices or applicable law change and may re-request consent where required. Questions: [email protected].