Last updated: 22 September 2026 · Issued by pipsync, LLC (Delaware, USA) · Notice-and-choice disclosure, including for California residents under the CCPA/CPRA · Governed by the laws of the State of Delaware, USA
A cookie is a small text file stored on your device by your browser when you visit a website. The term in this policy includes related technologies such as localStorage, sessionStorage, IndexedDB, web-beacons, and fingerprinting — collectively "client-side storage". We use them only as described below.
| Category | Purpose | Lifetime | Your choice |
|---|---|---|---|
Strictly necessary — next-auth.session-token, next-auth.csrf-token, __Secure-* | Authentication, CSRF protection, load-balancer affinity | Session / 30 d | Cannot be turned off — required for the Service to function |
Functional — ps-locale cookie, pipsync-theme (localStorage), pipsync_consent cookie and pipsync.cookie-consent (localStorage) | Remember your language, colour theme and the consent choice you made in the banner. The consent record is also read on app.pipsync.io so you are not asked twice. | 12 months (cookies); localStorage until you clear it | Language and theme can be switched off in the banner; the consent record itself is needed to remember that choice |
Analytics — Google Analytics 4 (_ga, _ga_*, Google LLC), Microsoft Clarity (_clck, _clsk, Microsoft Corp.) and Sentry Session Replay (no cookie; Functional Software, Inc.) | Page views, feature usage and conversion events (GA4); heatmaps and session recordings (Clarity, with every form field masked so nothing you type is recorded); replay of the session leading up to an error (Sentry, with all text and inputs masked and media blocked). None of these scripts is loaded, and no request leaves your browser to these providers, until you switch this category on. | GA4 up to 24 months; Clarity up to 12 months; Sentry Replay none | Opt-in — off until you switch it on |
Marketing — Meta Pixel (_fbp, Meta Platforms, Inc.) | Measures sign-ups from Meta (Facebook/Instagram) ads and builds ad audiences. The pixel is loaded only on the marketing site and the sign-up flow, never in the dashboard, and only after you switch this category on. | Up to 90 days | Opt-in — off until you switch it on |
| Not consent-gated — Ahrefs Web Analytics (no cookie; Ahrefs Pte. Ltd.) | Aggregate page-view counts on the public marketing site (pipsync.io) only. It sets no cookie, stores nothing on your device and keeps no persistent identifier, so it runs without a consent choice, like a server log. | — | Block the script in your browser if you prefer |
pipsync_consent cookie. To withdraw or change it, delete that cookie (or clear the site data for pipsync.io) in your browser — the banner is shown again on your next visit. Withdrawing analytics or marketing consent stops the tags described above from sending further data; a tag that was already loaded is fully gone on the next page load.We do not currently act on the Do Not Track (DNT: 1) header or the Global Privacy Control (GPC) signal automatically. Analytics and marketing trackers are off by default and load only after you switch them on in the banner, so a browser that sends DNT or GPC without answering the banner gets exactly the same treatment as one that rejects them. California residents can additionally exercise the opt-out rights described in section 3 using the contact address in section 6.
If we add, remove, or change the purpose of a cookie or tracker, this policy will be updated and the cookie banner re-displayed for users to re-confirm their choice.
support@pipsync.io — questions about cookies and tracking. See also our Privacy Policy.