Cookie policy

1. Cookies

• pq_session (strictly necessary): set only when you sign in to the dashboard or accept an invitation. It keeps you signed in, is HttpOnly, Secure, and SameSite=Lax, and expires after seven days or when you sign out.
• Cloudflare security cookies (strictly necessary): our host, Cloudflare, may set cookies such as __cf_bm or cf_clearance when its bot and abuse protection is active. We don’t read or control these.

2. Browser storage (localStorage)

These stay in your browser and are not sent to our servers:

• pq_theme: remembers whether you chose the light or dark theme.
• pq_profile_username: the display name a signed-in user chose for the dashboard header.
• pq_profile_avatar, pq_profile_avatar_bg, pq_profile_2fa: dashboard profile display preferences, set only by signed-in users.

The site also registers a service worker that caches a few static files (icons and the app manifest) so the dashboard loads quickly. It does not cache personal information.

3. Third-party requests

Our pages load fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google receives your IP address and browser details when this happens; we don’t set Google cookies. There are no analytics, advertising, or social-media trackers.

4. Your choices

Because we only use strictly necessary cookies and preference storage, there is no cookie banner. You can clear cookies and site data in your browser settings at any time; you will be signed out and preferences will reset. Questions: support@pathquill.app.