We don't use tracking cookies.
Last updated: May 13, 2026. This page lists every cookie and every local-storage key the marketing site and product touch — what it's for, who sets it, how long it lives, and how to opt out.
Marketing site (pfnstudio.com)
| Key | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| priorstudio.cookie-consent.v1 | localStorage | PFN Studio | Remembers that you dismissed the cookie banner. Stored as a JSON object with timestamp. | Until you clear it. |
| That's it — no tracking cookies, no advertising, no cross-site trackers. | ||||
Page-view analytics. We count visits with Cloudflare Web Analytics — a cookieless beacon loaded from static.cloudflareinsights.com. It sets no cookies, stores nothing on your device, and records only aggregate data (page URL, referrer, coarse country, browser) — no personal data and no cross-site identifiers. Cloudflare processes it on our behalf. To opt out, block that hostname in your content blocker.
Fonts are self-hosted — no request to Google Fonts. The only other third-party is the embedded product-tour video: it shows a self-hosted thumbnail, and only when you press play does it load the YouTube player from youtube-nocookie.com (YouTube's privacy-enhanced mode, which sets no tracking cookies until playback and receives your IP only at that point). If you never press play, YouTube is never contacted.
Hosted product (cloud.pfnstudio.com)
| Key | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| priorstudio.accessToken | localStorage | PFN Studio | JWT access token issued at login. Required to authenticate API requests. | 15 minutes (token expiry). |
| priorstudio.refreshToken | localStorage | PFN Studio | Long-lived refresh token used to get fresh access tokens. | 30 days, or until logout. |
| priorstudio.selectedOrgId | localStorage | PFN Studio | Remembers which workspace you last viewed so we open you back into it. | Until you switch. |
| priorstudio.user | localStorage | PFN Studio | Caches your basic account profile (name, email) so the app renders your identity without a round-trip on load. | Until logout. |
All four are strictly necessary for the product to function: you can't be authenticated without the tokens, and the workspace selector needs a hint to know where to land. There are no analytics cookies in the product either.
Opting out
You have a few options:
- Browser settings — most browsers let you block localStorage for specific sites. The marketing site still works (you'll see the banner on every visit). The product can't function without it.
- Skip the video — don't press play on the product-tour video and YouTube is never contacted. Fonts are self-hosted, so there's nothing else third-party to block on the marketing site.
- Delete your account — removes every server-side cookie / session record we have for you. See the Privacy policy for the timing.
Our approach to analytics
We measure traffic with the most privacy-preserving tool we could find: Cloudflare Web Analytics, which is cookieless and records only aggregate page views — no cookies, no personal data, no cross-site identifiers, no behavioural profiles, and no advertising. We deliberately avoid cookie-based analytics (Google Analytics, Mixpanel, PostHog) and ad tracking entirely.
If we ever change providers or add anything that collects more, we'll update this page and email registered users in advance.
Contact
Questions about this notice or anything cookie-shaped: privacy@profitops.ai.