Cookie & Tracking Technologies Policy
Minimal Storage OnlyEffective Date & Last Revision: November 6, 2026
This Policy explains how XPense Manager (xmanager.bizzra.com), operated by Bizzra (bizzra.com), utilizes HTTP cookies, tokens, and local sandboxed storage on web portals and mobile operating systems.
1 Do We Use Intrusive Tracking Cookies?
Zero Third-Party Advertising Trackers
XPense Manager does not utilize cross-site tracking pixels, third-party social media tracking widgets, or persistent marketing cookies to track your browsing behaviors across external websites.
2 Essential Technologies We Employ
Authentication Tokens (JWT & Refresh Tokens)
In our mobile application and API interactions, cryptographically signed JSON Web Tokens (JWT) maintain authenticated sessions securely without storing raw credentials on the device.
Local Device SharedPreferences & SQLite Cache
Android SharedPreferences and Room SQLite local storage retain your current selected currency, biometric login preferences, active theme (dark/light), and delta sync timestamps locally on your phone.
Web Portal Administrative Session Cookies
On our secure web portal and admin management interface, essential HTTPOnly and SameSite session cookies are utilized strictly to maintain administrative login states and guard against CSRF attacks.
3 Managing Your Preferences
You can clear local cached credentials on your Android device at any time by navigating to System Settings → Apps → XPense Manager → Clear Storage or by signing out directly within the app, which revokes active refresh tokens immediately.