Cookie policy

1. Which cookies we use

The site sets the cookies that signing in needs. Only with your consent does it also use third-party analytics and advertising cookies through Google Tag Manager (see Analytics and advertising cookies). Until you answer, or after you reject them, none of those cookies is set.

2. Sign-in cookies

better-auth.session_token: keeps you signed in to the Account page after you open the sign-in link we e-mail you. It is sent over secure connections only, cannot be read by JavaScript, and expires after 7 days or when you sign out. Over HTTPS its name carries the __Secure- prefix.

The admin area also uses better-auth.two_factor while the two-factor code is entered, and better-auth.dont_remember so that admin sessions end when the browser closes. Only administrators get these two.

3. Language

The language is part of the address (/vi or /en). When you open an address without it, the site follows a NEXT_LOCALE cookie if your browser already has one, then your browser's language settings. The site does not set this cookie itself.

4. Analytics and advertising cookies (with your consent)

On the public pages (home, pricing, download, FAQ, changelog, the legal pages, the checkout page and the thank-you page) the site loads Google Tag Manager. Google Tag Manager sets no cookies itself; it runs the following tools according to your choice: Google Analytics (visit measurement), Google Ads (conversion measurement and remarketing), Meta Pixel, Microsoft Clarity (heatmaps and recordings of interactions with the page) and TikTok Pixel. The account pages, the Paddle payment page and the bank transfer page do not load these tools.

By default, under Google's Consent Mode v2, every consent type (ad storage, ad user data, ad personalization, analytics storage) is denied. These tools then set no cookies; Google's tags may send cookieless signals (browser type, the page viewed, the consent state) to estimate figures.

When you select Accept, the tools may set cookies such as _ga and _ga_<id> (Google Analytics, up to 2 years), _gcl_au (Google Ads, 90 days), _fbp (Meta, 90 days), _clck and _clsk (Microsoft Clarity, 1 year and 1 day) and _ttp (TikTok, up to 13 months), and send Google, Meta, Microsoft and TikTok information about page views and purchases (order id, amount, currency, plan). We never send them your e-mail address, name or license key; like any request on the web, they receive your browser's IP address. They process this data under their own privacy policies.

Your choice is kept in your browser's storage (localStorage, key pfcove-consent), not in a cookie, and applied again on later visits. The thank-you page keeps the ids of the orders it reported in localStorage (key pfcove-purchases), so that no order is counted twice.

5. Managing cookies

You can change your choice at any time with the Cookie settings button at the bottom of the page. When you withdraw consent, the tools stop setting new cookies; delete the ones already set in your browser settings. You can delete cookies in your browser settings at any time; for the sign-in cookie, you will just need to sign in again. Questions about cookies: [email protected].