Cookie & Tracking Policy
Last updated: August 4, 2026 • August 2026 Standards
This Cookie & Tracking Policy explains how XYON, a product of BCN Studio, utilizes essential web storage tokens, session identifiers, and location permission technologies.
1. Essential Tokens & Local Storage Matrix
| Storage Key | Type | Purpose | Retention |
|---|---|---|---|
| player_token | LocalStorage | Encrypted JWT player session authorization token | 7 Days |
| player_user | LocalStorage | Cached player profile data for instant rendering | 7 Days |
| xyon_token | LocalStorage | Staff & Admin dashboard authentication token | 7 Days |
| UserDevice IP Record | Database Token | Stores primary device IP & User-Agent for security alerts | Purged after 30/90 days inactivity |
2. Geolocation Permissions
When accessing the Nearby Cafes page (`/cafes`), your browser requests HTML5 Geolocation access. Latitude and longitude values are processed locally in your browser to compute distance estimates in kilometers. Coordinates are never saved or shared.
3. Managing Preferences
You can manage your email notification preferences, promotional toggles, and security alert settings directly under your account settings at https://xyon.bcnstudio.tech/player/settings.