Last Updated: March 19, 2026

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.

2. Cookies We Use

2.1 Essential Cookies (Required)

These cookies are necessary for the service to function:

Cookie Name	Purpose	Duration
jwt_token	User authentication	30 minutes (session)
oauth_state	CSRF protection during OAuth	5 minutes (temporary)

Note: We use localStorage instead of traditional cookies for authentication tokens.

2.2 Third-Party Cookies

We use minimal third-party services:

Service	Purpose	Privacy Policy
Google OAuth	User authentication	Google Privacy
Paddle	Payment processing	Paddle Privacy
Microsoft Clarity	Behavioral analytics, heatmaps, session replay	Microsoft Privacy

3. What We DON'T Use

Privacy-First Approach:

No advertising cookies - We don't show ads or share data with advertisers
No social media trackers - No Facebook Pixel, Twitter, etc.
No cross-site tracking - We don't follow you around the internet
No fingerprinting - We don't use browser fingerprinting techniques

Note: We use Microsoft Clarity for behavioral analytics (heatmaps and session replay) to improve the user experience. Clarity uses first and third-party cookies. See our Privacy Policy for details.

4. How to Manage Cookies

4.1 Browser Settings

You can control cookies through your browser settings:

Chrome: Settings → Privacy and Security → Cookies
Firefox: Preferences → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Edge: Settings → Privacy → Cookies

4.2 Blocking Essential Cookies

Warning: If you block essential cookies (like localStorage for JWT tokens), PixGuard will not function properly:

You won't be able to log in
Your session will not persist
The service will be unusable

5. localStorage vs Cookies

PixGuard primarily uses localStorage instead of traditional cookies:

Item	Storage Location	Sent to Server
JWT Token	localStorage	Only in Authorization header (not automatic)

This approach gives you more control - tokens are only sent when explicitly needed, not with every request.

6. GDPR and Cookie Consent

Under GDPR:

Essential cookies (like authentication) do NOT require consent
Analytics cookies (Microsoft Clarity) require consent before loading

6.1 How We Obtain Consent

Authenticated users: By creating an account and accepting our Terms of Service, you consent to analytics technologies including Microsoft Clarity. Analytics are loaded automatically after login.
Anonymous visitors: A cookie consent banner is shown on the site. Microsoft Clarity is only loaded if you click "Accept". If you decline, no analytics cookies are set and the site functions normally.

6.2 Withdrawing Consent

You can withdraw consent at any time by:

Clearing your browser cookies and localStorage
Contacting us at [email protected] to request data deletion

7. Changes to This Policy

If we add new cookies or tracking technologies, we will:

Update this Cookie Policy
Notify you via email or through the service
Request consent if required by law

8. Contact Us

For cookie-related questions:

Email: [email protected]

Our Privacy Commitment

We believe in minimal tracking. We only use what's necessary for the service to function and never sell your data to third parties. Your privacy matters.

Cookie Policy