We don't use tracking cookies.
Last updated: May 13, 2026. This page lists every cookie and every local-storage key the marketing site and product touch — what it's for, who sets it, how long it lives, and how to opt out.
Marketing site (pfnstudio.com)
| Key | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| priorstudio.cookie-consent.v1 | localStorage | PFN Studio | Remembers that you dismissed the cookie banner. Stored as a JSON object with timestamp. | Until you clear it. |
| That's it. No analytics, no advertising, no third-party trackers. | ||||
Fonts are self-hosted — no request to Google Fonts. The marketing site makes no third-party requests on load. The one exception is the embedded product-tour video: it shows a self-hosted thumbnail, and only when you press play does it load the YouTube player from youtube-nocookie.com (YouTube's privacy-enhanced mode, which sets no tracking cookies until playback and receives your IP only at that point). If you never press play, YouTube is never contacted.
Hosted product (cloud.pfnstudio.com)
| Key | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| priorstudio.accessToken | localStorage | PFN Studio | JWT access token issued at login. Required to authenticate API requests. | 15 minutes (token expiry). |
| priorstudio.refreshToken | localStorage | PFN Studio | Long-lived refresh token used to get fresh access tokens. | 30 days, or until logout. |
| priorstudio.selectedOrgId | localStorage | PFN Studio | Remembers which workspace you last viewed so we open you back into it. | Until you switch. |
| priorstudio.user | localStorage | PFN Studio | Caches your basic account profile (name, email) so the app renders your identity without a round-trip on load. | Until logout. |
All four are strictly necessary for the product to function: you can't be authenticated without the tokens, and the workspace selector needs a hint to know where to land. There are no analytics cookies in the product either.
Opting out
You have a few options:
- Browser settings — most browsers let you block localStorage for specific sites. The marketing site still works (you'll see the banner on every visit). The product can't function without it.
- Skip the video — don't press play on the product-tour video and YouTube is never contacted. Fonts are self-hosted, so there's nothing else third-party to block on the marketing site.
- Delete your account — removes every server-side cookie / session record we have for you. See the Privacy policy for the timing.
Why we don't track
We've deliberately avoided analytics, advertising, and behavioural tracking on this site. Three reasons: it's the right default; we don't have a use for the data that justifies the privacy cost; and the people we want to reach (researchers, ML platform teams) are exactly the people who notice.
If we ever add server-side analytics for product-improvement (aggregated, non-identifying), we'll list it here and email registered users in advance.
Contact
Questions about this notice or anything cookie-shaped: privacy@profitops.ai.