How consent works
XBurma uses a self-hosted consent controller to present region-appropriate choices and store the visitor's decision. It reads the two-letter country code from Cloudflare's same-origin/cdn-cgi/trace response and does not retain the returned IP address. Necessary storage is available because the site cannot provide security and account functions without it.
XBurma currently uses no advertising provider. In regions requiring prior opt-in, optional Google Analytics remains off until the visitor allows it. In opt-out regions analytics may start after notice, unless the visitor has saved an opt-out choice or sends a recognised Global Privacy Control signal.
Use at any time to review or change a choice. A changed choice applies going forward; a browser may require removal of previously stored third-party data through its own site-data controls.
Storage used by XBurma
| Category | Purpose | Typical lifetime |
|---|---|---|
| Necessary | Signed account session, request security and abuse prevention. | Session data expires after 7 days; security signals vary. |
| Preference | Age confirmation in local storage and the xburma_age_confirmed cookie. | Up to 1 year, or until browser data is cleared. |
| Necessary | Random browser identifiers that prevent duplicate likes or reactions. | Until browser data is cleared or the identifier expires. |
| Consent | The first-party xburma_consent cookie and matching local-storage record preserve regional mode, allowed categories and the decision timestamp. | Up to 180 days, or until browser data is cleared. |
| Analytics — optional | Google Analytics measures page use and traffic sources when the applicable regional rule and saved choice allow it. | Controlled by the saved XBurma choice and Google's current retention settings. |
Browser and privacy controls
Browsers can block, delete or isolate cookies and local storage. Doing so may sign the visitor out, show the age confirmation again or reset duplicate-action protection. Where recognised by the configured regional framework, the self-hosted controller honours Global Privacy Control by disabling optional analytics.
More information
The Privacy Policy explains data use, sharing, retention and privacy requests. Questions can be sent through the Contact & safety page.