Cookie Policy

This Cookie Policy explains how Xponentshift Limited ("we", "us", or "our") uses cookies and similar technologies on Avaaso.com. Under GDPR, we operate an opt-in model — analytics and marketing cookies are only placed with your explicit consent.

Last Updated: April 17, 2026

1. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work correctly, remember your preferences, and provide information to site owners. We also use localStorage as a fallback where cookies may be restricted by your browser.

2. Our Approach: Consent First

We follow a strict consent-first (opt-in) model in line with GDPR requirements:

  • When you first visit Avaaso.com, a cookie consent banner appears.
  • Only Strictly Necessary cookies are active before you make a choice.
  • Analytics and Marketing cookies are disabled by default and only activate if you explicitly accept them.
  • You can update your preferences at any time via the "Cookie Settings" link in the footer.
  • Your preferences are saved for 12 months and synced to your account if you are logged in, so your choice persists across devices.

3. Types of Cookies We Use

CategoryDescriptionConsent RequiredProvider
Strictly NecessaryRequired for the platform to function. Includes authentication sessions, security tokens, and cookie consent preferences. Cannot be disabled.No — always activeSupabase, Avaaso
AnalyticsAnonymised usage data used to understand how users interact with the platform and to improve our services. Only activated upon your explicit consent.Yes — opt-in onlyPostHog (EU servers)
MarketingUsed to personalise property listings and content based on your browsing activity on the platform.Yes — opt-in onlyAvaaso

4. Third-Party Cookies

Some cookies are set by trusted third-party services we use to operate the platform:

  • PostHog: Analytics cookies placed only with your explicit consent. Data is stored on PostHog's EU servers. All session recordings use input masking to ensure no sensitive form data is captured.
  • Stripe: Cookies used during payment flows to ensure secure and reliable transactions. These are strictly necessary when making a payment.
  • Cloudflare Turnstile: CAPTCHA service used on forms to protect against automated bot submissions. No personal data is stored.
  • Supabase: Sets a session cookie to keep you logged in securely across page visits.

5. Analytics Cookies & Consent

No analytics data is collected unless you explicitly accept analytics cookies. Our analytics tool is configured to remain fully inactive by default. If you decline or have not yet responded to the cookie consent banner, no usage data is recorded.

6. How Long Are Cookie Preferences Stored?

Your cookie consent preferences are stored for 12 months in a browser cookie and in your account (if logged in) so your choice is remembered across sessions and devices. You can update your preferences at any time.

7. How to Manage or Withdraw Consent

You have full control over your cookie preferences:

  • Cookie Settings link: Click "Cookie Settings" in the footer of any page to review and update your preferences at any time.
  • Browser settings: You can block or delete cookies through your browser's settings. Note that disabling Strictly Necessary cookies may prevent parts of Avaaso from functioning correctly.
  • Withdraw consent: You may withdraw previously given consent at any time by reopening the Cookie Settings and selecting "Essential Only."

8. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology or data protection law. Any changes will be posted on this page with an updated “Last Updated” date.

9. Contact Us

If you have any questions about our use of cookies or this policy, please contact us at:

Xponentshift Limited
1 McElwain Terrace, Newbridge, Co. Kildare, W12 C434, Ireland
Email: info@avaaso.com

You also have the right to lodge a complaint with the Irish Data Protection Commission at www.dataprotection.ie.