Cookie Policy
Learn which cookies and similar technologies FROST ELITE uses for security, sessions, referral attribution, and consent-based analytics, and how to manage them.
This Cookie Policy explains how XDRIP Digital Management LLC uses cookies and similar browser technologies on the FROST ELITE website and ambassador dashboard.
1. Scope and relationship to the Privacy Policy
Cookies are small data files placed on a browser or device. Similar technologies include local storage, session storage, pixels, and identifiers. They support security, sessions, preferences, referral attribution, and—when you consent—analytics.
This Policy should be read with the FROST ELITE Privacy Policy. The XColdPro Shop and other XColdPro sites may use different technologies and publish separate cookie notices.
2. Technologies and categories we use
FROST ELITE uses three categories:
- Strictly necessary: security, request validation, login sessions, and saved consent choices.
- Referral attribution: first-party identifiers used when a visitor follows an ambassador link, so a qualifying purchase can be attributed and fraudulent traffic can be investigated.
- Optional analytics: first-party or self-hosted measurement that loads only after affirmative consent and remains off when consent is rejected or Global Privacy Control is detected.
3. Strictly necessary technologies
| Technology | Purpose | Typical duration |
|---|---|---|
| Session cookie | Maintains a secure session and ambassador sign-in state. | Up to 2 hours of inactivity, unless a permitted persistent sign-in is selected. |
XSRF-TOKEN | Helps protect forms and authenticated requests from cross-site request forgery. | Session / up to 2 hours. |
shop_cookie_consent (local storage) | Stores the version, time, and analytics choice recorded in the consent banner. | Until deleted or reset when the consent version changes. |
These technologies are required to provide a secure service or remember the privacy choice you requested. Blocking them in your browser may prevent login, forms, and dashboard features from working correctly.
4. Referral attribution technologies
| Technology | Purpose | Duration |
|---|---|---|
xcoldpro_ref | Stores the referring ambassador code and attribution timestamp after a valid referral interaction. | 30 days. |
xcoldpro_ref_visitor | Assigns a pseudonymous visitor identifier for click deduplication, attribution, and fraud prevention. | 30 days. |
| Server-side referral record | Records referral code, timestamp, landing page, campaign parameters, IP address, user agent, and related security data. | According to the attribution, audit, fraud-prevention, and dispute periods described in the Privacy Policy. |
Referral technologies do not give an ambassador access to your payment credentials. Attribution can be affected by browser restrictions, deleted cookies, device changes, invalid traffic, or a later valid referral interaction.
5. Optional analytics
With your consent, we load self-hosted Matomo and XF Analytics to measure page views, navigation, device and browser characteristics, referrers, performance, and aggregate site use. Analytics is not loaded when you reject non-essential technologies or when Global Privacy Control is enabled.
Matomo identifiers may persist for up to 13 months, while shorter session identifiers typically expire after about 30 minutes. XF Analytics identifiers and event records are retained only as needed for measurement, security, and aggregate reporting.
6. Third-party services and linked sites
When an ambassador connects a payout account, they are redirected to Stripe. Stripe may use its own cookies for security, fraud prevention, authentication, and regulatory compliance under the Stripe Privacy Policy. Linked XColdPro sites and social platforms control their own technologies; their policies apply after you leave FROST ELITE.
7. Managing your choices
You can accept or reject optional analytics in the cookie banner and reopen the preferences at any time using "Manage cookies" in the footer. Withdrawing consent stops future optional analytics loading; it does not make earlier consent-based processing unlawful.
You can also delete or block cookies and site data in your browser. Browser controls may remove the consent record, causing the banner to appear again. Blocking strictly necessary storage may break sign-in or form security, while rejecting analytics does not prevent core use of the public site.
8. Global Privacy Control and Do Not Track
When a supported browser sends a Global Privacy Control signal, FROST ELITE treats it as an opt-out and forces optional analytics off. Because there is no uniform legal or technical standard for the older Do Not Track signal, the site does not separately respond to DNT. You can always use the consent controls described above.
9. Updates and contact
We may update this Policy when technologies, retention periods, vendors, or legal requirements change. A material change that requires renewed consent may reset stored preferences and show the banner again. The effective date and version on the public page identify the current Policy.
Questions about cookies or consent can be sent to support@xcoldpro.com.