Cookie Policy
TL;DR – Cookies at a Glance
- We use only essential cookies by default.
- Essential cookies are required for login and security.
- Analytics cookies are used only with your consent.
- We do not use cookies for advertising or tracking across sites.
- You can change your cookie preferences at any time.
This Cookie Policy explains how XCORE.GG (“we”, “us”) uses cookies and similar technologies on xcore.gg (the “Platform”).
This policy is provided in accordance with the EU ePrivacy Directive and Regulation (EU) 2016/679 (GDPR).
1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They are widely used to make websites work efficiently, improve security, and provide information to the site owner.
2. Essential (Strictly Necessary) Cookies
These cookies are required for the Platform to function properly and cannot be disabled. They do not require user consent.
| Cookie Name | Purpose | Duration | Attributes |
|---|---|---|---|
| exphub_jwt | JWT-based user authentication | 60 days | HttpOnly, Secure, SameSite=Lax, Signed |
| xcore_session_production | Server-side session management | 60 days | HttpOnly, Secure, SameSite=None |
Domain: .xcore.gg
Path: /
These cookies are used solely for authentication, session handling, and platform security. They are not used for tracking or advertising.
Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in secure service delivery).
3. Analytics Cookies (Optional)
With your explicit consent, xcore.gg may use analytics cookies to understand how the Platform is used and to improve its performance.
- Provider: Google Analytics 4 (GA4)
- Purpose: Usage statistics, performance analysis
- Activation: Only after consent
Analytics data is processed in an EU-compliant configuration and is not used for advertising or cross-site tracking.
Legal basis: Article 6(1)(a) GDPR (consent)
The Platform also uses Vercel Speed Insights for performance monitoring. This service does not set cookies and does not require user consent.
No cookies or persistent identifiers are used by Vercel Speed Insights.
4. Third-Party Authentication Cookies
When you sign in or connect accounts using third-party providers (such as Google, Steam, Xbox (Microsoft), or Discord), those providers may set cookies on your device as part of their authentication process.
These cookies:
- Are set and controlled by the third-party provider
- Are subject to the provider’s own cookie and privacy policies
- Are required to complete secure OAuth authorization flows
xcore.gg does not access or store third-party cookies or credentials.
5. Future Cookies
As the Platform evolves, additional cookies may be introduced for new features such as:
- User preferences
- Premium subscriptions
- Matchmaking, rankings, or leaderboards
- B2B features
Any such cookies will be clearly documented and, where required, activated only after user consent.
6. Managing Cookies
You can manage or withdraw your cookie consent at any time through the cookie consent banner or via your browser settings.
Disabling non-essential cookies will not affect the core functionality of the Platform.
7. Changes to This Policy
This Cookie Policy may be updated from time to time. Changes will be published on xcore.gg and communicated via in-app notice where appropriate.