Cookie policy.

Cookies are small text files a website saves in your browser. Some are essential to make the site work, like keeping you signed in. Others are optional and usually used for analytics. Pinnix uses the essential kind plus, if you agree, two analytics tools on the marketing pages: Google Analytics and Microsoft Clarity. Pinnix runs no advertising or remarketing tags of its own, and uses neither tool for advertising. One Clarity cookie (MUID) is set by Microsoft and can also be used by Microsoft for advertising on its own sites, which we explain in section 3. None of the optional ones run until you say yes.

One cookie, strictly necessary:

• better-auth.session_token (shown as __Secure-better-auth.session_token over HTTPS). Keeps you signed in. Set by Pinnix’s own authentication, not a third party. Strictly necessary, lasts about 7 days, and refreshes while you are actively using the app.

If you tap OK with that on the banner, Pinnix loads two analytics tools. Neither runs until you accept, and neither runs in the signed-in app.

Google Analytics 4 counts which pages get read. It sets:

• _ga. A random ID Google uses to tell unique visitors apart. Expires after two years.
• _ga_VMLLS7KFTK. The same kind of ID, scoped to this site’s analytics property. Expires after two years.

We use Google Analytics for the basics: page views, country, device type, and where visitors came from. IP addresses are anonymised, and Pinnix does not run Google Ads or remarketing. Google’s own description is in their cookie policy.

Microsoft Clarity helps us see how people actually use the pages, through heatmaps and anonymised session replays. Replays record clicks, scrolling and mouse movement, but all text you type is masked out, so we cannot read what you enter into a form. Clarity sets:

• _clck. Keeps a Clarity ID for this site so return visits are recognised. First-party, lasts about a year.
• _clsk. Ties the page views in one visit into a single session. First-party, lasts about a day.
• CLID. Identifies the browser the first time Clarity sees it. Set on clarity.ms, lasts about a year.
• ANONCHK. Used to check whether the MUID identifier is carried over. Lasts about ten minutes.
• MUID. A Microsoft-wide identifier that Microsoft also uses for analytics and advertising on its own sites, such as Bing. Set by Microsoft, lasts about 13 months.
• SM. Synchronises the MUID identifier across Microsoft domains. Lasts for the session.

Microsoft processes this data for us and separately as its own controller when it uses MUID across its sites. Microsoft retains Clarity data for a limited period. See Microsoft’s privacy statement and the Clarity terms.

If you say No thanks, nothing is sent to Google or Microsoft, no scripts load, and the banner will not reshow.

You can switch analytics on or off at any time:

Manage cookie preferences

Only for the analytics cookies. Under UK GDPR and the Privacy and Electronic Communications Regulations (PECR), explicit consent is required before non-essential cookies are set. That is why the banner is there, and why nothing tracking-related runs until you accept.

You can clear cookies or block them entirely in your browser settings. Doing so will sign you out of Pinnix and you will not be able to sign back in until you re-enable them, since the session cookie is essential to authentication.

Instructions for each major browser: Chrome, Firefox, Safari, Edge.

If we make a material change to this policy, we will tell you by email and update the date and version at the top. Earlier versions are available on request.

Questions about cookies or how we handle your data? Email hello@pinnix.app. Full detail on data is in our Privacy Policy.