Cookie policy
Draft for review by a lawyer. Version 0.2, 2026-10-11.
This page lists every cookie and similar technology used by Pandus. Cookies that are needed for the Service to work are always on. Statistics and session recordings are off until you allow them in the European Economic Area, the United Kingdom and Switzerland; in other countries they are on until you switch them off (a Global Privacy Control signal counts as switching off). You can change your choice at any time with “Cookie settings” at the bottom of every page.
Necessary cookies (always on)
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
pandus-session |
Pandus | keeps you signed in during a visit; protects forms | 2 hours of inactivity |
XSRF-TOKEN |
Pandus | protects forms against cross-site request forgery | 2 hours of inactivity |
remember_web_… |
Pandus | “remember me” after sign-in (only if you sign in) | up to 400 days |
locale |
Pandus | the language you chose | 5 years (most browsers cap it at 400 days) |
appearance |
Pandus | light or dark theme | 1 year |
sidebar_state |
Pandus | whether the menu in the customer area is open | 7 days |
consent |
Pandus | your cookie choice and a random ID linking it to our record of your consent | 180 days |
The free check and the forms use Cloudflare Turnstile to tell people from bots; it runs in a frame from challenges.cloudflare.com when a form is shown and processes only the browser signals needed for that check. Turnstile issues a cookie only in its "pre-clearance" mode, which we do not use.
Card payments open the Paddle checkout (paddle.com) in a frame only when you choose to pay by card; Paddle's own cookie notice applies there.
Statistics — Google Analytics 4 (EEA, UK, Switzerland: only with your consent; elsewhere: until you switch it off)
| Cookie | Purpose | Lifetime |
|---|---|---|
_ga |
distinguishes browsers with a random ID | 2 years |
_ga_<container-id> |
keeps the state of the visit (session) | 2 years |
Advertising features (Google signals, ad personalisation) are off. Data is kept for 14 months.
Session recordings and heatmaps — Microsoft Clarity (EEA, UK, Switzerland: only with your consent; elsewhere: until you switch it off)
| Cookie | Purpose | Lifetime |
|---|---|---|
_clck (our domain) |
keeps the pseudonymous Clarity user ID and preferences | 1 year |
_clsk (our domain) |
joins page views of one visit into one recording | 1 day |
CLID (Microsoft) |
records when Clarity first saw this browser on any site using Clarity | 1 year |
MUID (Microsoft) |
Microsoft's ID of the browser | 1 year |
ANONCHK, MR, SM (Microsoft) |
technical flags for synchronising MUID; Clarity does not use the advertising ID |
set by Microsoft |
[УКАЗАТЬ: Microsoft's cookie list does not state lifetimes; confirm them in the browser after setup.]
Clarity records clicks, scrolling and the page layout. Text in the customer area, in sign-in and sign-up forms and in form fields is hidden from the recordings. Recordings are kept for 30 days and heatmaps for 13 months.
How to change your mind
- Use “Cookie settings” at the bottom of any page and choose again. When you withdraw consent, we delete the Google Analytics and Clarity cookies set on our domain and reload the page.
- You can also delete cookies in your browser settings.
Each choice is recorded with its date, what you allowed and the versions of the banner and of this policy, so that we can prove consent (GDPR Art. 7(1)).
More about how we process data: Privacy policy.