Cookie Policy

This Cookie Policy explains how ContentHub s.r.o. uses cookies and similar technologies on PreflightX at https://preflightx.io. It supplements our Privacy Policy.

1. What cookies are

Cookies are small pieces of information stored by your browser and sent back to a website with relevant requests. They can support sign-in, sessions and security. Similar technologies include local storage, session storage and tracking pixels.

2. Essential cookies we use

The hosted Service uses the following essential first-party cookies:

• preflightx_access authenticates your account requests. Its lifetime follows the expiry supplied by the authentication service.
• preflightx_refresh supports refreshing your authenticated session so you can remain signed in. The current application sets a maximum lifetime of 30 days when this cookie is issued or refreshed.
• shipsafe_session supports the scan session, access to its results and session-level protections. It is scoped to the Service's API and currently has a maximum lifetime of one hour. It also helps avoid duplicate aggregate usage counts within that session.

When you choose a Pro plan before you have an account, the page keeps one local storage entry, preflightx.pro-intent, so secure checkout for that plan can open right after you sign up or confirm your email. It holds the time of that click, the plan you chose (Monthly or Lifetime), which part of the page you chose it on and, if you arrived through a campaign link, that link's campaign labels (the utm_source, utm_medium, utm_campaign and utm_content values, only when they are short plain words). It is removed when checkout opens or when you close the sign-up dialog without an account, and is ignored after 30 minutes. When checkout opens, the plan, the page area and the campaign labels are sent to our server with the checkout request and stored with that payment at Stripe; nothing in this entry is sent to anyone else.

These cookies are HttpOnly and use the Secure attribute on our HTTPS hosted Service, with SameSite restrictions. Their purpose is authentication, session continuity and security. They are not advertising identifiers. Expiry, sign-out or browser settings may remove a cookie before its maximum lifetime.

Blocking essential cookies may prevent sign-in, maintaining a session or accessing scan results. We use essential cookies without requesting optional-cookie consent where applicable law permits this.

3. Analytics and advertising

At this policy's effective date, we do not use optional analytics cookies or intentionally set non-essential advertising or cross-site behavioral advertising cookies. We do not sell personal information or share it for cross-context behavioral advertising.

We maintain first-party aggregate usage counters, such as counts of page views, scans and interactions with plan features. These counters do not store URLs, IP addresses or session tokens, and do not use an additional analytics cookie. We do not currently use local storage, session storage or tracking pixels for optional advertising or analytics.

If we introduce non-essential technologies, we will update this policy and obtain consent where required before using them.

When enabled, our PostHog product analytics runs in cookieless mode: it sets no cookies and keeps no analytics identifier or event data in local storage or session storage. While starting, the analytics library checks that local storage is available by writing a fixed test value and removing it immediately; nothing is kept. Page views and page leaves are measured without cookies or browser storage; automatic click tracking, form capture and session recording are disabled. PostHog still receives network information, such as your IP address and user-agent, and derives a daily visitor identifier on its servers; see our Privacy Policy for the information processed. Our integration does not load analytics when your browser sends Global Privacy Control or Do Not Track. The essential cookies above are unchanged.

4. Stripe payment features

When you interact with Stripe Checkout or other Stripe payment features, Stripe may use its own cookies or similar technologies for payments, fraud prevention and security. These are governed by Stripe's Cookie Policy and Privacy Policy.

5. Your choices

Your browser settings let you view, delete or block cookies. Deleting or blocking essential cookies can sign you out or prevent parts of the Service from working. Browser controls apply separately on each browser and device. There are currently no optional analytics or advertising cookies to enable through a PreflightX preference panel. You can prevent our cookieless PostHog analytics by turning on Global Privacy Control or Do Not Track in your browser.

6. Changes and contact

We will update this policy and the date above if our cookie use changes. For questions about cookies or personal information, contact the company below.