Pavr uses very few cookies. No advertising network, no cross-site tracking, no data
broker appears in this list.
Cookies we set
| Cookie | Purpose | Lifetime |
|---|---|---|
__Host-session_token |
Keeps you signed in. Signed, HTTP-only, sent only over HTTPS and only to the app. Strictly necessary. | Session / until sign-out |
pavr_signed_in |
Lets pavr.io show "Dashboard" instead of "Sign in" when you're signed in. Holds only "1". | Session |
_pavr_session |
Protects forms from forgery and carries one-time messages from one page to the next. HTTP-only. Strictly necessary. | Session |
customer_locale |
Remembers the language you chose on a page a contractor sent you. | 1 year |
theme |
Remembers whether you chose light, dark or system appearance. | 1 year |
install_banner_dismissed |
Remembers that you closed the prompt to put Pavr on your phone's home screen. | 1 year |
These are the cookies Pavr sets itself.
Services we load
Some features load a service from another company, and that company may set its own
cookies or store data in your browser: chat on pavr.io and in the app (Chirp), card entry
and payment pages (Stripe), and spam checks on public forms (Cloudflare Turnstile). Maps
load imagery from Mapbox, Esri and Google. We use none of them for advertising.
Analytics
The marketing site uses Plausible Analytics, which is cookieless. It counts page
views and referrers in aggregate. It sets no cookie, does not fingerprint your device
and cannot follow you to other sites.
What we do not use
No advertising cookies. No remarketing pixels. No social-media tracking pixels. No
session recording or heat-mapping.
Managing cookies
You can clear or block cookies in your browser settings. Blocking the session cookie
prevents sign-in, because it is how the application knows who you are. Blocking the
theme cookie only means your appearance preference is forgotten.
Changes
If we add a cookie, this table changes first.