This Cookie Policy explains how PermitPilot uses cookies and similar technologies. For how we handle personal data more broadly, see our Privacy Policy.
Cookies are small text files stored on your device by your browser. They let a site remember your actions and preferences (such as keeping you logged in) and, optionally, help measure how the site is used. We also use comparable browser storage (e.g. localStorage) to remember your consent choice.
| Category | Purpose | Examples | Consent |
|---|---|---|---|
| Strictly necessary | Authentication and security — keep you logged in and protect the session. | sid (session), fc_consent (your cookie choice, stored in localStorage) | Always on (no consent required) |
| Functional | Remember preferences to improve your experience. | UI preferences (if enabled) | Optional |
| Analytics — Google Analytics (GA4) | Understand aggregate, anonymized usage (pages viewed, sessions) to improve the product. Google Analytics is loaded only after you choose "Accept all"; with IP anonymization enabled. | _ga, _gid, _gat (set by Google Analytics) | Optional — only with consent |
| Marketing / advertising | Not currently used. If introduced, used only with consent. | — | Optional — only with consent |
The Google Analytics cookies above (_ga, _gid, _gat) are not set until you click "Accept all" on the consent banner. If you choose "Essential only", no analytics cookies are loaded. You can withdraw consent at any time using the Reset my cookie choice button below. For how Google processes this data, see Google's Privacy Policy and how Google uses cookies.
Our login cookie sid is HttpOnly, Secure and SameSite=Lax, and expires after 7 days. It contains a signed reference to your session, not your password.
When you first visit, a banner lets you accept all cookies or essential only. You can change your choice at any time by clearing the fc_consent value below, or via your browser settings (which can block or delete cookies — note that blocking the session cookie will log you out).
Payment (Stripe) and email (Resend) providers may set their own cookies when you interact with their flows; see their policies. We do not use third-party advertising cookies.