Legal
Cookie Policy
This policy explains what cookies are, which ones PACOD uses, and how you can control them. It complements our <a href="/privacy">Privacy Policy</a>.
1. What are cookies?
Cookies are small text files a website stores on your device. They let a site remember things between requests — for example, that you're signed in or which language you prefer. Some "cookie-like" storage (such as your browser's localStorage) works similarly but isn't technically a cookie; we note where we use it below.
2. How we categorise cookies
- Strictly necessary — required for the site to work (e.g. keeping you signed in). These can't be switched off and don't require consent.
- Functional / preference — remember choices you make, like your language or theme, to improve your experience.
- Analytics — help us understand which pages are used and for how long (for signed-in users, linked to your account). Optional, off by default, and set only after you allow them. Allowing them also enables our own first-party measurement of page views and time on page, which sets no cookie of its own.
- Advertising — let us measure our campaigns and show relevant ads on Google, Microsoft (Bing), Facebook, Instagram, TikTok, X, Pinterest and LinkedIn. A separate choice from analytics, also off by default.
3. Cookies we use
| Name | Category | Purpose | Duration |
|---|---|---|---|
app_session | Strictly necessary | Keeps you signed in. Holds an opaque session ID only — never your password or tokens. HttpOnly, SameSite=Lax, Secure. | ~8 hours |
webui_sso | Strictly necessary | Signals that single sign-on to the embedded chat has been completed, so you aren't redirected in a loop. HttpOnly, SameSite=Lax. | ~8 hours |
oauth_redirect | Strictly necessary | Set only while you sign in with Google: remembers which page to open once you return. Holds a page path only. HttpOnly, SameSite=Lax. | ~5 minutes |
PARAGLIDE_LOCALE | Functional / preference | Remembers your chosen interface language (Bulgarian, English, German, or Russian). | ~400 days |
theme (localStorage, not a cookie) | Functional / preference | Stores your light/dark theme choice in your browser so the site doesn't flash on load. Never sent to our servers. | Until you clear it |
cookie_consent | Strictly necessary | Remembers your cookie choices so we don't ask again on every visit. | ~180 days |
_ga, _ga_* | Analytics | Google Analytics. Distinguishes visitors so page views can be counted in aggregate. Set only with your analytics consent. | up to ~2 years |
_gcl_au | Advertising | Google Ads conversion measurement — tells us an ad led to a signup. Set only with your advertising consent. | ~90 days |
_fbp, _fbc | Advertising | Meta pixel (Facebook and Instagram). Measures campaigns and enables remarketing. Set only with your advertising consent. | ~90 days |
_ttp | Advertising | TikTok pixel. Measures campaigns run on TikTok. Set only with your advertising consent. | ~13 months |
personalization_id | Advertising | X (Twitter) website tag. Measures campaigns run on X. Set only with your advertising consent. | ~2 years |
_ym_uid, _ym_d, _ym_* | Analytics | Yandex Metrica. Distinguishes visitors so page views and goals can be counted in aggregate. Session recording (Webvisor) is off. Set only with your analytics consent. | up to ~1 year |
_clck, _clsk | Analytics | Microsoft Clarity. Aggregated click and scroll heatmaps showing how pages are used. Set only with your analytics consent. | up to ~1 year |
_uetsid, _uetvid | Advertising | Microsoft Advertising (Bing) UET tag. Measures campaigns run on Microsoft Advertising. Set only with your advertising consent. | up to ~13 months |
_pin_unauth, _epik, _derived_epik | Advertising | Pinterest tag. Measures campaigns run on Pinterest. Set only with your advertising consent. | up to ~1 year |
li_fat_id | Advertising | LinkedIn Insight tag. Measures campaigns run on LinkedIn. Set only with your advertising consent. | ~30 days |
4. Third-party cookies
Unless you allow the optional categories above, PACOD sets no third-party cookies at all — the scripts that would set them are never loaded. If you do consent, the third parties involved are Google (Analytics and Ads), Yandex (Metrica), Microsoft (Clarity and Advertising), Meta (Facebook and Instagram), TikTok, X, Pinterest and LinkedIn, each listed in the table above. We set no embedded-media or payment cookies in any case.
Signing in with Google happens on Google's own pages (accounts.google.com), where Google's cookies and Privacy Policy apply; on our site it sets only the strictly necessary oauth_redirect and app_session cookies above, and we keep no Google tokens (see section 5 of our Privacy Policy). How Google uses information from sites that use its services, including its analytics and advertising tags: policies.google.com/technologies/partner-sites.
5. Managing cookies
You can change your choice at any time with the button below — withdrawing consent clears the optional cookies we can reach and reloads the page so nothing further is loaded. Blocking the strictly necessary and preference cookies through your browser instead may stop the site working or reset your choices; you can delete them and clear localStorage from your browser settings at any time.
6. Changes to this policy
We'll update this page whenever our use of cookies changes and revise the "Last updated" date accordingly.
7. Contact
Questions about cookies? See our contact page or email office@pacod.io.