XR Institute Ogrizovićeva 3, 10000 Zagreb, Croatia Last updated: March 19, 2026
1. What are cookies?
Cookies are small text files that a website places on your device (computer, phone, or tablet) when you visit. They allow the website to recognize your device on future visits, remember your preferences, and understand how you use the site.
Some cookies are set by us (“first-party cookies”). Others are set by third-party services we use (“third-party cookies”).
2. How we use cookies
XR Institute uses cookies and similar technologies (pixels, local storage) for three purposes:
- Essential functionality — making the website and platform work correctly
- Analytics — understanding how visitors use the site so we can improve it
- Preferences — remembering your choices (such as cookie consent)
We do not use advertising cookies. We do not run ads on XR Institute. We do not use cookies for cross-site behavioral tracking or retargeting.
3. Cookies we use
3.1 Strictly necessary cookies
These cookies are required for the website to function. They cannot be switched off. They are usually set in response to actions you take, such as logging in, filling out forms, or setting your privacy preferences.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| session_id | xrinstitute.com | Maintains your login session | Session (cleared when you close the browser) |
| csrf_token | xrinstitute.com | Protects against cross-site request forgery | Session |
| cookie_consent | xrinstitute.com | Remembers your cookie preference so we don’t ask again | 12 months |
Legal basis: These cookies are exempt from consent requirements under the ePrivacy Directive because the site cannot function properly without them.
3.2 Analytics cookies
These cookies help us understand how visitors interact with the website — which pages are visited, how long people stay, and where they encounter issues. All analytics data is aggregated or anonymized. We do not use it to identify individual visitors.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics (Google LLC) | Distinguishes unique visitors | 2 years |
| ga[ID] | Google Analytics (Google LLC) | Maintains session state | 2 years |
| _gid | Google Analytics (Google LLC) | Distinguishes unique visitors (short-term) | 24 hours |
| _gat | Google Analytics (Google LLC) | Throttles request rate | 1 minute |
| _clck | Microsoft Clarity (Microsoft Corp.) | Identifies unique users for Clarity analytics | 12 months |
| _clsk | Microsoft Clarity (Microsoft Corp.) | Connects page views into a single session | 1 day |
| CLID | Microsoft Clarity (Microsoft Corp.) | Identifies the first visit by a user | 12 months |
| ANONCHK | Microsoft Clarity (Microsoft Corp.) | Indicates whether MUID cookie is transferred to ANID | Session |
| MR | Microsoft Clarity (Microsoft Corp.) | Used to collect information for analytics | 6 months |
| SM | Microsoft Clarity (Microsoft Corp.) | Used for synchronizing MUID across Microsoft domains | Session |
Legal basis: Consent (Art. 6(1)(a) GDPR). These cookies are only placed after you accept analytics cookies in our cookie banner. If you decline, they are not set.
Google Analytics configuration:
- IP anonymization is enabled (the last octet of your IP address is set to zero before storage)
- Data sharing with Google products is disabled
- Data retention is set to 26 months
- We have a Data Processing Agreement with Google
- Google’s privacy policy: https://policies.google.com/privacy
Microsoft Clarity configuration:
- Clarity does not collect passwords, payment details, or sensitive form fields
- Session recordings automatically mask personal input fields
- Data is retained for 30 days
- We have a Data Processing Agreement with Microsoft
- Microsoft’s privacy policy: https://privacy.microsoft.com/privacystatement
3.3 Functional / preference cookies
These cookies remember choices you make to improve your experience.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| theme | xrinstitute.com | Remembers your display preference (e.g., dark/light mode) | 12 months |
| locale | xrinstitute.com | Remembers your language preference | 12 months |
| dismissed_banners | xrinstitute.com | Remembers which notification banners you’ve closed | 6 months |
Legal basis: Consent (Art. 6(1)(a) GDPR). Set only after you accept functional cookies.
4. Email tracking pixels
Our email service provider may embed a small, invisible image (a “tracking pixel”) in marketing emails we send you. This tells us whether and when an email was opened, and which links were clicked. We use this data in aggregate to understand which content is most relevant to our members.
Email tracking pixels in marketing emails are covered by the consent you give when you opt in to marketing communications (e.g., by joining the waitlist). You can withdraw that consent at any time by unsubscribing, and we will stop sending tracked marketing emails. Transactional emails (password resets, receipts) do not contain tracking pixels.
You can also prevent pixel tracking by configuring your email client to block remote images.
5. Your cookie choices
When you first visit
No non-essential cookies are placed until you make a choice. The first time you visit xrinstitute.com, we display a cookie consent banner before any analytics or functional cookies are set. You can:
- Accept all cookies — enables essential, analytics, and functional cookies
- Accept essential only — enables only the cookies required for the site to work (analytics and functional cookies are not set)
- Customize — choose which optional categories to enable
Changing your preferences later
You can change your cookie preferences at any time by clicking the “Cookie Settings” link in the website footer. This will re-display the consent banner.
Browser-level controls
You can also manage cookies through your browser settings. Most browsers allow you to:
- See what cookies are stored and delete them individually
- Block third-party cookies
- Block all cookies (note: this may break some website functionality)
- Clear all cookies when you close the browser
Instructions for common browsers:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies
Do Not Track (DNT)
Some browsers send a “Do Not Track” signal. There is no universal standard for how websites should respond to DNT. However, if you decline analytics cookies in our consent banner, we will not track your usage regardless of the DNT setting.
Global Privacy Control (GPC)
We recognize the Global Privacy Control signal. If your browser sends a GPC signal, we treat it as a request to opt out of analytics cookies and will not set them.
6. Similar technologies
In addition to cookies, we may use:
- Local storage — to store non-sensitive preferences on your device (functions similarly to cookies but is not sent with every request)
- Session storage — temporary data cleared when you close the tab
These are governed by the same consent mechanisms described above.
7. Updates to this policy
We may update this Cookie Policy if we add or remove cookies, or change how we use them. When we make material changes, we will update the “Last updated” date and, if necessary, re-display the consent banner so you can review your choices.
8. Contact us
If you have questions about our use of cookies:
Email: privacy@xrinstitute.com Post: XR Institute, Ogrizovićeva 3, 10000 Zagreb, Croatia