Cookie Policy
Last updated: August 6, 2026
PawByTech uses one session cookie, two short-lived sign-in cookies, and a few layout preferences stored in your browser. There is no analytics, no advertising and no third-party tracking — which is why you are not asked to accept anything.
1. Why there is no cookie banner
Art. 4(5) of Law 506/2004, which implements the ePrivacy Directive in Romania, requires your consent before storing anything on your device — unless it is strictly necessary to provide a service you explicitly asked for. Everything PawByTech stores falls in that exception: it either keeps you signed in, protects the sign-in itself, or remembers a layout choice you made in the app. None of it identifies you across other websites, and none of it is shared with anyone.
If we ever add analytics or anything else outside that exception, we will ask for your consent first, with a real choice to refuse, and this page will say so.
2. Cookies we set
All of these are first-party — set by https://pawbytech.com and sent nowhere else.
| Name | What it does | How long it lasts |
|---|---|---|
| better-auth.session_token | Keeps you signed in and ties each request to your account. HTTP-only and secure, so page scripts cannot read it. | Up to 7 days; deleted when you sign out |
| better-auth.state, better-auth.pkce_code_verifier | Set only while you are signing in with Google, to tie the response back to the request you started and block forged sign-ins. | A few minutes — removed as soon as sign-in finishes |
3. Stored in your browser, not in a cookie
These live in your browser's local storage. They never travel to our server — they only restore the interface the way you left it.
| Key | What it does | How long it lasts |
|---|---|---|
| pawbytech.theme | Whether you chose the light, dark or system colour theme. | Until you clear it |
| pawbytech.ui | Workbench layout choices: row density, the result view you picked, and whether the filter panel is open. | Until you clear it |
| leadscout.pipeline, leadscout.searches | Left over from the version of the app that kept your board in the browser. Read once to move it to your workspace, then deleted. | Removed on first sign-in |
4. Third-party content
Map tiles are loaded from OpenStreetMap when you use the map view, and payment pages are served by Stripe when you buy something. Those requests reach the provider's own servers, and their handling of your data is covered by their policies. We set no third-party cookie on our own pages, and our content security policy blocks scripts from other origins entirely.
5. Turning them off
Every browser lets you block or delete cookies and clear local storage. Blocking the session cookie will stop you signing in — the service cannot work without it. Clearing local storage only resets the interface to its defaults.
6. Questions
Write to office@doderasoft.com. What we do with the data behind these cookies is explained in the Privacy Policy.