Cookie Policy
Effective date: 18 August 2026 Last updated: 18 August 2026
This Cookie Policy explains the cookies and similar technologies (together, "cookies") that PZStack (https://pzstack.com) uses on its website and dashboard, what they do, and how you can control them. It is a companion to our Privacy Policy.
1. What is a cookie?
A cookie is a small text file stored in your browser when you visit a site. Cookies let the site remember who you are between page loads (so you don't re-login on every click), keep things secure, and - sometimes - measure how the site is used. The law distinguishes between strictly necessary cookies (you cannot disable them and still use the site) and non-essential cookies (which require your consent in the EU/EEA/UK/Türkiye under the ePrivacy / PECR / KVKK regimes).
We also treat values stored in localStorage (the browser's key/value store) as "cookies" for the purpose of this policy, because the law largely treats them the same way.
2. How we use cookies
PZStack does not use advertising, cross-site, or third-party tracking cookies. We have no advertising partners. Everything below is first-party and exists to make the Service work.
2.1 Strictly necessary
These cookies are essential for the Service and are set without your consent because you cannot opt out of them and still log in. They are set only after you start a signup / login flow.
| Name | Set by | Purpose | Type | Expiry |
|---|---|---|---|---|
pz_refresh | pzstack.com (HTTP-only, secure, path-scoped to /auth) | Your authenticated session (refresh-token handle). Without it you cannot stay logged in. | First-party, HTTP-only cookie | 30 days, rotated on each refresh |
We also set a short-lived access token in memory (not a cookie) that expires after 15 minutes.
2.2 Preferences (localStorage, not a cookie but disclosed for transparency)
| Key | Where | Purpose | Expiry |
|---|---|---|---|
pzstack.theme | Browser localStorage | Remember your dark/light/system theme choice so the site doesn't flash the wrong theme on load | Until you clear it |
pzstack.cookie-consent | Browser localStorage | Record that you accepted / rejected / customised non-essential cookies, so we don't ask again on every visit | 12 months |
These are set by your browser locally; nothing is sent to us.
2.3 Security & abuse prevention
Our infrastructure may set short-lived cookies or inspect request metadata to detect brute-force or credential-stuffing attacks (rate-limit counters keyed by session or IP). These are strictly necessary and are not tied to an identity cookie.
2.4 Payment processor / Merchant of Record
When you click "Upgrade" or "Buy", checkout is processed in coordination with our authorized Merchant of Record. The payment provider may set its own essential cookies to process your payment securely, combat fraud, and maintain PCI-compliant checkout state. Those cookies are governed by the payment provider's cookie notice, not ours - we do not control them.
2.5 Error monitoring
If we have enabled Sentry (our error monitor) for the dashboard, the Sentry SDK may set a short correlation identifier to group together errors from the same browsing session. It is not used for advertising. Sentry does not load at all if the SENTRY_DSN environment variable is empty.
2.6 Analytics
We currently do not run product analytics (no Google Analytics, no PostHog, no Plausible, no Meta Pixel, no ad-tech of any kind). If we add analytics in future, we will load the script only after you have accepted it via the consent banner, and we will update this page and the Privacy Policy.
3. How to control cookies
3.1 Our consent banner
On your first visit from the EU/EEA, UK, or Türkiye (and everywhere else, we show it globally to keep things simple) you will see a banner with three choices:
- Accept all - turn on non-essential cookies (today: none; reserved for future analytics).
- Reject non-essential - continue with strictly-necessary cookies only.
- Customise - pick category by category.
You can re-open the banner any time by clicking Cookie settings in the footer. Your choice is stored in pzstack.cookie-consent and respected for 12 months, after which we'll ask again.
3.2 In your browser
All modern browsers let you block or delete cookies site-by-site. If you block pz_refresh on our domain, you will not be able to stay logged in. Browser instructions:
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Settings → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions → Cookies.
3.3 Do Not Track / Global Privacy Control
We respect the Global Privacy Control (GPC) signal where it applies. Because we do not sell or share personal data in the CCPA/CPRA sense, GPC currently has no functional effect - but we will treat it as an opt-out of any non-essential cookie if and when we add them.
4. Changes
If we add new cookies or change the purpose of existing ones, we will update this page and - for any addition that requires consent - re-ask through the banner.
5. Contact
Questions about cookies? Email [email protected].