Legal
Cookie Policy
This website sets no cookies. The application sets three, and every one of them is required to keep you signed in. Nothing here is used for advertising or analytics.
Effective 21 August 2026 · Applies to PixyScan
1. This website sets none
The pages on pixyscan.com are a static export served from a CDN. There is no analytics script, no tag manager, no advertising pixel, no embedded video player, no chat widget and no social embed. Nothing on this site writes a cookie or reads one, and nothing here is shared with a third party for tracking.
Your browser will still record the ordinary things it records for any website — a cache entry, an HTTP request in your provider’s logs — but no identifier is set by us.
2. Cookies in the application
Signing in to the PixyScan application sets three cookies. All three are strictly necessary: without them there is no way to stay signed in between requests.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
access_token | Authenticates each request to the API. Set by the API on its own domain, httpOnly, so no script — ours or anyone else’s — can read it. | Strictly necessary | Short-lived; refreshed transparently |
refresh_token | Obtains a new access token when the current one expires, so you are not signed out every few minutes. Also httpOnly. | Strictly necessary | Until you sign out or it expires |
pixyscan_has_session | A flag with the value 1 and nothing else in it. It tells the front end that a session probably exists, so a returning user is sent to their workspace rather than flashed the sign-in form first. It contains no identifier and grants no access. | Strictly necessary | Up to 1 year, cleared on sign-out |
There are no analytics, advertising, personalisation or third-party cookies in the application either.
3. Local storage in the application
The application also keeps a few preferences in your browser’s local and session storage. These are not cookies — they are never sent to a server — but they are worth declaring:
- Your appearance preference (light or dark) and accent colour.
- The last workspace you were in, so the next visit opens where you left off.
- The order you have arranged your sites in.
- Which branches of a page tree you had expanded, and your position in a long list.
- Fix-checklist progress you have ticked off against a finding.
Clearing your browser’s site data removes all of it.
4. Why there is no consent banner
Consent is required for cookies that are not strictly necessary. We do not set any. Every cookie listed above exists solely to deliver a service you have explicitly asked for by signing in, which is the exemption those rules provide for — so a banner would be asking you to consent to nothing.
If that ever changes — if we add analytics, for example — we will ask for consent before setting anything, and this page will say so first.
5. Controlling cookies
Every browser lets you view, block and delete cookies, usually under Privacy or Site settings. Blocking the three above will prevent you signing in to the application; it will not affect this website, which sets none.
6. Changes
This page is updated whenever the set of cookies changes. What we do with the data behind them is in the Privacy Policy. Questions: privacy@pixyscan.com.