Cookie Policy
The PilotFox tracking script sets no cookies. The cookies and browser storage PilotFox itself uses, what each is for and how long it lasts.
The PilotFox tracking script sets no cookies, on your website or anyone else's. PilotFox itself uses a few cookies of its own, only to sign people in to the app, and a little browser storage to remember choices. It uses none of them for analytics or advertising, and pilotfox.app sets no third-party cookies.
On websites that use PilotFox
The script (/api/s.js) sets no cookies, and PilotFox reads none when it records a visit: visitors are told apart on the server, by a visitor id the browser never sees. The script writes to the browser's storage only in these cases:
| Storage | Key | Written when | Removed |
|---|---|---|---|
localStorage | pilotfox:uid | The website calls identify(): the user id it passed. | By reset(). |
localStorage | pilotfox:optout | The visitor opts out (optOut(), for example from a consent banner). | By optIn(). |
localStorage | pilotfox:ignore | A page is opened with ?pilotfox_ignore=true (site owners use it to leave their own visits out). | By ?pilotfox_ignore=false or optIn(). |
sessionStorage | pilotfox:rs | Only on websites with session replay on: whether this tab is recorded. | When the tab closes. |
With a custom data-namespace, the keys start with that name instead of pilotfox. When storage is blocked, these values live in memory for the page only.
On pilotfox.app
The public pages
The home page, the documentation and these legal pages set no cookies and run no analytics script. If you pick a theme with the switch at the bottom of the home page, your choice is stored in localStorage under ui-theme, where the app keeps its own theme too; choosing System removes it.
The app
Signing in to PilotFox uses these cookies. All are set by pilotfox.app itself and cannot be read by scripts (HttpOnly). Another website can make your browser send them only by a link you follow to pilotfox.app (SameSite=Lax). They travel only over HTTPS (Secure), which is why their names start with __Secure-.
| Cookie | What it is for | How long it lasts |
|---|---|---|
__Secure-pilotfox.session_token | Keeps you signed in. | 7 days, renewed at most once a day while you use PilotFox; deleted when you sign out. |
__Secure-pilotfox.session_data | A signed copy of your session, so the app need not look it up on every request. | 2 minutes. |
__Secure-pilotfox.sign_up_proof | Proves that this browser made a sign-up, so the verification link opened here keeps the password you chose. Sent only to PilotFox's sign-in service (/api/auth). | 1 hour. |
__Secure-pilotfox.state | Protects a sign-in with Google or GitHub against forgery. | 5 minutes. |
__Secure-pilotfox.two_factor | Remembers the first step of a sign-in while you enter your two-factor code. | 10 minutes. |
__Secure-pilotfox.trust_device | Skips the two-factor step on this browser. Set only when you tick Trust this device for 30 days. | 30 days, renewed when you sign in with it. |
__Secure-pilotfox.dont_remember | Ends a session when the browser closes. Set by a sign-in that asks not to be remembered (PilotFox's own sign-in form does not ask), and while a PilotFox system administrator is signed in as another user. | Until the browser closes. |
__Secure-pilotfox.admin_session | Set only for a PilotFox system administrator signed in as another user: their own session, to return to. | 7 days, or until they stop. |
__Secure-pilotfox.session_token.oauth_logout_confirmation | Set only when an app you connected to PilotFox (an OAuth client) asks to sign you out: holds that request while you confirm it. | 5 minutes. |
The app also keeps a few choices in your browser's storage:
| Storage | Key | What it is for | How long it lasts |
|---|---|---|---|
localStorage | ui-theme | Your theme (Light or Dark). | Until you choose System. |
localStorage | pf.chart.revenue, pf.chart.goal | Whether the main chart shows its revenue and goal lines, once you switch one. | Until you clear your browser's storage. |
sessionStorage | map-renderer | The map renderer you picked, where two are offered. | Until the tab closes. |
sessionStorage | map-fresh-page | Reloads the page once when the map switches renderer. | Removed after that reload. |
sessionStorage | tsr-scroll-restoration-v1_3 | Where you were on each page, for the Back and Forward buttons. | Until the tab closes. |
Other websites
The app loads no scripts, fonts or trackers from other websites. Two features reach other services, and those services' own policies apply to them:
- The map views load their base map from a map tile provider, which receives your IP address and browser details as any web server does. Some map providers' map code also keeps usage counters or cached map tiles in your browser.
- Signing in with Google or GitHub takes you to their website, where their cookies apply.
Managing cookies
Your browser lets you see and delete cookies and stored data for pilotfox.app. Signing out deletes the session cookie; without it, you cannot stay signed in. The cookies above are needed for features you use, so PilotFox shows no cookie banner. Questions: hello@pilotfox.app.