Cookie Policy
Last updated
Written from how the product actually works, and not yet reviewed by a lawyer. If anything here is wrong or unclear, tell us at help@pressypress.com and we will fix it.
Every cookie this site sets, by name. Not a category summary — the actual strings you would find if you opened your browser’s cookie list for pressypress.com, so you can check this page against reality rather than take it on trust.
This covers our site. A WordPress site running on a Pressy sets whatever its own theme and plugins set, which is yours to declare — the privacy policy §8 explains the split.
Strictly necessary
These are set whatever you choose, because without them the thing you asked for does not happen — you cannot stay signed in, a form cannot prove it came from us, and the page cannot know which theme to paint before it paints it. The law does not require consent for cookies that are genuinely necessary, and we have kept the list to ones that genuinely are.
- What it does
- Keeps you signed in. HTTP-only, so no script on the page can read it.
- How long
- 30 days, refreshed while you keep using the dashboard
- What it does
- Proves a form submission came from our own page, not from somewhere else pretending to be you.
- How long
- Until the browser closes
- What it does
- Remembers which page you were heading to, so signing in returns you there instead of to the dashboard root.
- How long
- Until the browser closes
- What it does
- Set only if you sign in with Google. Ties the response from Google to the request that started it.
- How long
- 15 minutes
- What it does
- Set only if you sign in with Google, for the same reason as the one above.
- How long
- 15 minutes
- What it does
- Whether you chose light or dark. Read on the server so the first paint is already right, rather than flashing the wrong one.
- How long
- 1 year
__Secure-authjs.session-token
__Host-authjs.csrf-token
__Secure-authjs.callback-url
__Secure-authjs.pkce.code_verifier
__Secure-authjs.state
theme
| Name | What it does | How long |
|---|---|---|
| __Secure-authjs.session-token | Keeps you signed in. HTTP-only, so no script on the page can read it. | 30 days, refreshed while you keep using the dashboard |
| __Host-authjs.csrf-token | Proves a form submission came from our own page, not from somewhere else pretending to be you. | Until the browser closes |
| __Secure-authjs.callback-url | Remembers which page you were heading to, so signing in returns you there instead of to the dashboard root. | Until the browser closes |
| __Secure-authjs.pkce.code_verifier | Set only if you sign in with Google. Ties the response from Google to the request that started it. | 15 minutes |
| __Secure-authjs.state | Set only if you sign in with Google, for the same reason as the one above. | 15 minutes |
| theme | Whether you chose light or dark. Read on the server so the first paint is already right, rather than flashing the wrong one. | 1 year |
None of these follows you anywhere. They are set by pressypress.com and readable only by pressypress.com.
Analytics
We currently set no analytics cookies at all. No Google Analytics, no advertising pixel, no third-party tracker — nothing on this page contacts an analytics provider, so there is nothing to consent to and no banner asking you to. If that changes, this section will list every cookie by name before any of them is set, and you will be asked first. This page is generated from the same setting that would switch them on, so it cannot claim one thing while the site does another.
What we have never set
No advertising or retargeting cookies. No social-media pixels. No session recording, heatmaps or mouse tracking. No fingerprinting to work around a refusal. No data broker gets anything, because none of them gets anything at all.
Refusing them in your browser
Every browser can block or delete cookies, and you can use that on us without asking. Be aware of the trade: blocking the strictly necessary ones above means you cannot stay signed in, so the dashboard will bounce you back to the sign-in page each time.
Blocking third-party cookies, or using a tracker blocker, will not break anything here — worth saying because on many sites it does.
Questions
Ask at help@pressypress.com. If you find a cookie set by this site that is not listed above, that is a bug in this page and we want to know.