Cookie Policy

We do not use advertising, analytics or tracking cookies, and we do not use local storage to follow you around. The only cookies are the ones that let you sign in and stay signed in.

These come from the sign-in system (Auth.js) and are set only when you use the sign-in or sign-up pages or the signed-in workspace:

• Session cookie: keeps you signed in. It is HTTP-only, so page scripts cannot read it, and it is sent only over HTTPS in production. It lasts up to 30 days, or until you sign out
• CSRF token cookie: protects the sign-in form against forged requests. It is short-lived and contains no personal details
• Callback URL cookie: remembers which page to send you to after you sign in

These cookies are strictly necessary for the service to work, so they are set without a consent banner. You can block them in your browser, but you will not be able to sign in.

The public website, free tools and demo do not need an account. The free tools run in your browser and what you type into them is not sent to us or stored in cookies.

Pages that show a map, such as the Contact page, load an embedded Google Maps frame. Google may set its own cookies when that frame loads. We do not control them. See Google's privacy information. We do not load Google Fonts; the site uses the fonts already on your device.

You can see, block and delete cookies in your browser's settings. Signing out removes the session cookie.

If we add a cookie that is not strictly necessary, we will ask for your consent first and update this page. Questions: support@businesspilotos.com.