Cookies and Similar Technologies

What we found in the current app

This page describes the repository's current browser storage and cookie behavior. It is not a promise that a hosting provider, identity provider, payment provider, or future release will use the same technologies. Check the deployed site and update this inventory whenever providers or scripts change.

Strictly necessary authentication cookies

The backend sets an HttpOnly refresh cookie for the primary account flow and a separate HttpOnly refresh cookie for platform-admin authentication. The cookies support session refresh and logout; the primary cookie's Secure and SameSite behavior is configuration-dependent and the admin cookie is Secure in production. They are not used for advertising.

Web storage used by the app

The frontend also uses browser storage that is not technically a cookie: access tokens and platform-admin tokens, a one-off deal draft, a theme preference, and temporary workspace-selection state. Web storage is readable by JavaScript on the same origin. Clearing it can sign you out, remove a locally saved draft, or reset a preference. Do not use a shared or untrusted browser for sensitive work.

Analytics and third-party technologies

Optional Google Analytics can be enabled for the public website when a measurement ID is configured. It is loaded only after a visitor accepts the analytics prompt and is used for page views and anonymous public conversion events such as starting a deal, completing signup, or sending a sales request. The backend also includes optional server-side PostHog event tracking when a PostHog API key is configured; that does not by itself establish a browser cookie. Google sign-in, payment, messaging, storage, email, AI, monitoring, and hosting providers may process data or use their own technologies when enabled.

Choices and changes

You can decline optional analytics in the prompt. To change the choice, clear the Paymarka analytics preference in the browser and revisit the site. Necessary authentication and saved-draft features may still use cookies or browser storage.

For questions about this inventory, use the Paymarka contact form or review the Privacy Notice.