Cookie Policy

NEEDS LEGAL REVIEW. This is a starter draft. Do not treat as final until a qualified attorney has reviewed it.

This Cookie Policy explains what cookies Pluripo sets, why, and what choices you have. It supplements the Privacy Policy.

1. What cookies Pluripo sets

The account portal at app.pluripo.com sets a single strictly-necessary session cookie. The cookie holds an opaque session token that authenticates your portal requests. Its properties are:

• HTTP-only. Not readable from JavaScript running in the browser.
• Secure. Sent only over HTTPS.
• SameSite=Lax. Sent on top-level navigation to the portal but not on cross-site requests initiated by third parties.
• Scoped to app.pluripo.com. Not sent to pluripo.com or any other domain.

The session cookie is required for the portal to function. Without it, you cannot sign in or manage your account. It is not used for tracking, analytics, advertising, or any purpose other than maintaining your authenticated session.

2. Cookies on this marketing site

The marketing site at pluripo.com (which is where you are reading this) does not set any cookies at all. It is a static site served as plain HTML and CSS, with no analytics, no advertising, no third-party trackers, and no consent banner because there is nothing to consent to.

3. No analytics or advertising cookies

Pluripo does not use Google Analytics, Meta Pixel, advertising cookies, or any other tracking technology at this time. If that ever changes, a cookie-consent banner will be deployed before any non-strictly-necessary cookie is set, and this policy will be updated.

4. Third-party cookies during checkout

When you proceed through Stripe Checkout to subscribe or to purchase top-up credits, Stripe sets its own cookies on the Stripe-hosted checkout page. Those cookies are necessary for Stripe to process the payment securely, and they are governed by Stripe’s own cookie policy: https://stripe.com/cookies-policy/legal. Pluripo has no control over Stripe’s cookies and does not receive their contents.

Similarly, signing in via Google OAuth involves Google setting its own cookies on Google-hosted pages, governed by Google’s cookie and privacy policies.

5. Browser controls

You can clear or block the portal session cookie through your browser’s settings, but doing so will sign you out of the account portal and prevent you from signing back in until you allow the cookie again. Because the cookie is strictly necessary for the service, there is no in-product opt-out for it; the only opt-out is to stop using the service.

6. Changes to this policy

If we add new cookies — for example, an analytics cookie that requires consent — we will update this page and, before any non-strictly-necessary cookie is set, present a consent banner in the account portal. Material changes will also be announced via in-app notice.

7. Contact

Questions about cookies or this policy: privacy@pluripo.com.