How consent works
XBurma uses a self-hosted consent controller to present region-appropriate choices and store the visitor's decision. It reads the two-letter country code from Cloudflare's same-origin/cdn-cgi/trace response and does not retain the returned IP address. Necessary storage is available because the site cannot provide security and account functions without it.
Advertising supports the service and Adsterra delivery starts for human production sessions independently of XBurma's optional measurement choice. In regions requiring prior opt-in, optional analytics and advertising measurement remain off until the visitor allows them. In opt-out regions optional measurement may start after notice, unless the visitor has saved an opt-out choice or sends a recognised Global Privacy Control signal.
Use at any time to review or change a choice. A changed choice applies going forward; a browser may require removal of previously stored third-party data through its own site-data controls.
Storage used by XBurma
| Category | Purpose | Typical lifetime |
|---|---|---|
| Necessary | Signed account session, request security and abuse prevention. | Session data expires after 7 days; security signals vary. |
| Preference | Age confirmation in local storage and the xburma_age_confirmed cookie. | Up to 1 year, or until browser data is cleared. |
| Necessary | Random browser identifiers that prevent duplicate likes or reactions. | Until browser data is cleared or the identifier expires. |
| Consent | The first-party xburma_consent cookie and matching local-storage record preserve regional mode, allowed categories and the decision timestamp. | Up to 180 days, or until browser data is cleared. |
| Analytics — optional | Google Analytics measures page use and traffic sources when the applicable regional rule and saved choice allow it. | Controlled by the saved XBurma choice and Google's current retention settings. |
| Advertising delivery | Adsterra scripts load for human production sessions and may use cookies, pixels, IP-derived location, device information and frequency controls under the provider's policy. | Controlled by the advertising provider and the visitor's browser or content-blocking settings. |
| Advertising measurement — optional | Optional Google advertising signals follow the applicable regional rule and saved XBurma choice. | Controlled by the saved XBurma choice and Google's current retention settings. |
Browser and privacy controls
Browsers can block, delete or isolate cookies and local storage. Doing so may sign the visitor out, show the age confirmation again or reset duplicate-action protection. Where recognised by the configured regional framework, the self-hosted controller honours Global Privacy Control by disabling optional analytics and advertising measurement. That preference does not stop Adsterra delivery; browser cookie and content-blocking controls operate separately.
More information
The Privacy Policy explains data use, sharing, retention and privacy requests. Questions can be sent through the Contact & safety page.