Cookies Policy

Effective: TODO: effective date

This policy describes every cookie and every piece of browser storage this website uses. The short version: no analytics, no advertising and no tracking. There is one short-lived cookie used during Google sign-in, and your API key is kept in your own browser.

This document is a draft pending legal review.

What Cookies Are

A cookie is a small text file a website asks your browser to store and send back on later requests. Browsers also offer similar storage, such as local storage, which a site's own pages can read but which is not sent to the server automatically. This policy covers both.

Which Cookies and Storage We Use

Everything below is strictly necessary for something you have asked for. Nothing is used for analytics, advertising or profiling.

pmd_google_flow (cookie): set only when you start Google sign-in. It holds signed, single-use values that prove the sign-in that returns from Google is the one your browser started. It is HttpOnly, sent only to the sign-in endpoints, expires after ten minutes, and is deleted as soon as sign-in finishes.
pmd.apiKey (local storage): your API key, saved in your browser after you sign in so that the dashboard can call the API for you. It stays until you sign out or clear your browser's site data. It is never sent anywhere except to our API, as your credential.
Back-office session (cookie): used only by our staff when signing in to the internal administration interface. Customers never receive it.

This website's fonts are served from this website, not from a third-party font service, and it loads no third-party scripts.

Third-Party Cookies

This website does not set third-party cookies. If you choose to sign in with Google, you are sent to Google's own pages, where Google may set or read its own cookies under its own policy. Those cookies belong to Google's site, not to this one, and we do not have access to them.

Your Choices

Because we use only strictly necessary cookies and storage, we do not show a consent banner. If we ever add anything that is not strictly necessary, we will ask for your consent before setting it.

You can block or delete cookies and site data in your browser's settings. Blocking cookies stops Google sign-in from working, though signing in with an email and password still works. Clearing this website's site data removes your stored API key and signs you out of the dashboard. The key itself stays valid until you revoke it.

Changes to This Policy

If we add, change or remove a cookie or a storage item, we will update this page first. The effective date at the top shows the current version.

Contact

Questions about cookies or browser storage go to TODO: contact email.