XPR Media Cookie Policy

Effective Date: June 1st, 2026
Version: 1.1

This Cookie Policy explains how XPR Media (“XPR”, “we”, “our”, or “us”) uses cookies and similar technologies when you use our website or services.

  1. What Are Cookies?

Cookies are small text files placed on your device to store data. They help websites remember your actions and preferences such as login status, language settings, and session information.

  1. Types of Cookies We Use

  • Strictly Necessary To enable essential platform functionality including logins, security, and session tracking. These cannot be disabled.
  • Performance To collect information on how visitors use our website, including analytics and usage patterns.
  • Functional To remember your preferences and enhance your experience across the platform.
  • Marketing To deliver relevant advertising and measure the effectiveness of campaigns.

  1. Third-Party Cookies

We may allow trusted third parties such as Google Analytics and LinkedIn Insights to set cookies for analytics and advertising purposes. These third parties are governed by their own privacy policies.

Cookies Used by the Sopro Plugin
The Sopro Plugin uses cookies to enhance website performance, functionality, and analytics.
  • _obid Purpose: Tracks unique visits to the site and relates them to the email campaign. Expires: 1 year Role: Performance and Analytical
  • _obid_visit Purpose: Identifies a session across multiple pages. Not linked to personal data. Expires: 4 hours Role: Advertising and Tracking
  • Webchat Cookies (Enabled only if the Webchat function is activated)
  • cuid_* Purpose: Used as a session cookie in the webchat. Not linked to personal data. Expires: 15 days Role: Functional

  1. Your Choices

You can manage your cookie preferences at any time through your browser settings. Options include blocking or deleting cookies, enabling Do Not Track signals, and using browser extensions for additional privacy controls.

Please note that disabling certain cookies may affect the functionality of the platform.

  1. Updates to This Policy

We may update this Cookie Policy periodically. Any changes will be reflected on this page. By accepting our cookies you acknowledge that you have read and accepted the current version of this policy.

  1. Contact Us

For questions about our use of cookies, contact us at privacy@xpr.media.

XPR Media Data Processing Addendum

By continuing to use the XPR Media platform and syndicating content through our services, you acknowledge that you have read, understood, and accepted the following Data Processing Addendum. This DPA is incorporated into the main agreement between XPR Media and its clients and applies when XPR processes personal data on behalf of the client.

  1. Definitions

Data Controller: The client, who determines the purpose of processing. Data Processor: XPR Media, who processes personal data on behalf of the controller. Personal Data and Processing: As defined under GDPR Article 4.

  1. Purpose of Processing

XPR will process personal data solely for the following purposes: enabling content syndication, managing agency and publisher accounts, providing access to reporting tools, and delivering contracted services.

  1. Client Obligations

The client represents that it has obtained all necessary rights and consents to share personal data with XPR and syndicate content on behalf of its own clients, and that all personal data shared is relevant, accurate, and lawfully obtained.

  1. XPR Obligations

XPR agrees to process data only on documented instructions, implement appropriate technical and organisational security measures, ensure confidentiality and limit access to authorised personnel, and assist the client in fulfilling data subject rights.

  1. Sub-Processors

XPR may use sub-processors including hosting and analytics providers. A current list is available upon request. XPR ensures all sub-processors are subject to equivalent data protection obligations.

  1. Data Transfers

Personal data may be transferred to countries outside the EEA under appropriate safeguards including Standard Contractual Clauses and Data Privacy Framework participation.

  1. Data Subject Requests

If XPR receives a data subject request directly, we will notify the client without undue delay and assist in responding where required.

  1. Security Breach Notification

In the event of a confirmed personal data breach, XPR will notify the client without undue delay, provide full details of the incident, and cooperate with all necessary mitigation efforts.

  1. Audit Rights

The client may audit XPR’s data processing activities upon reasonable notice during normal business hours, limited to once annually unless legally required.

  1. Termination

Upon termination of the agreement, XPR will delete or return all personal data unless retention is required by applicable law.

  1. Governing Law

This DPA is governed by the same laws and jurisdiction as the main agreement between XPR Media and the client.

Scroll to Top