Cookie Policy

Effective Date: 8 December 2025 Last Updated: 8 December 2025

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and enable functionality.

Cookies We Use

Pixelflare uses minimal cookies strictly necessary for service functionality.

Strictly Necessary Cookies

These cookies are essential for the service to function:

Authentication Cookies

• Purpose: Maintain your login session
• Provider: Cloudflare Access
• Duration: Session-based (deleted when you close your browser)
• Data Stored: Session identifier, authentication token
• Can Be Disabled: No (required for authentication)

Security Cookies

• Purpose: Protect against CSRF attacks and bot activity
• Provider: Cloudflare
• Duration: Session-based to persistent (varies by security feature)
• Data Stored: Security tokens, challenge responses
• Can Be Disabled: No (required for security)

Cookies We Do NOT Use

Pixelflare does not use:

• Advertising cookies
• Marketing cookies
• Social media tracking cookies
• Third-party analytics cookies (Google Analytics, etc.)
• Cross-site tracking cookies
• Performance/optimization cookies beyond what Cloudflare provides

Cloudflare Cookies

As Pixelflare is hosted on Cloudflare infrastructure, Cloudflare may set cookies for:

• DDoS protection
• Bot management
• Performance optimization
• Security features

These cookies are necessary for service delivery. Learn more at Cloudflare's Cookie Policy.

Your Choices

Cookie Control

Since we only use strictly necessary cookies:

• You cannot disable them without breaking the service
• They are not optional - required for authentication and security
• They do not track you across other websites

Browser Settings

You can configure your browser to:

• Reject all cookies (this will prevent you from using Pixelflare)
• Delete cookies after each session
• Manage cookie preferences per-site

However, blocking necessary cookies will make the service unusable.

No Consent Banner

Under GDPR and UK GDPR, websites only need consent banners for non-essential cookies.

Since Pixelflare only uses strictly necessary cookies for:

• Authentication
• Security

We do not display a cookie consent banner.

Third-Party Services

GitHub OAuth

When you authenticate via GitHub OAuth, GitHub may set their own cookies. These are governed by GitHub's Privacy Policy.

Cloudflare

Cloudflare provides our infrastructure and may set cookies for security and performance. These are governed by Cloudflare's Cookie Policy.

Data Storage

Cookie data is:

• Stored locally on your device
• Transmitted over encrypted HTTPS connections only
• Not shared with third parties (except Cloudflare for infrastructure)
• Automatically deleted when sessions expire

Children's Privacy

We do not knowingly collect cookies from children under 13. If you are under 13, do not use this service.

Self-Hosted Instances

If you deploy your own Pixelflare instance:

• You are responsible for cookie compliance in your jurisdiction
• This policy serves as a template only
• You may need to create your own cookie policy
• Consider any additional cookies your infrastructure introduces

Changes to This Policy

We may update this cookie policy if:

• We introduce new features that require cookies
• Laws or regulations change
• We change infrastructure providers

Significant changes will be announced with an updated "Last Updated" date.

More Information

For more details about how we handle your data:

• Privacy Policy - General data handling
• Terms of Service - Service usage terms
• Security Policy - Security practices

Contact Us

For questions about cookies:

• GitHub Issues
• Use contact information in the repository

Legal Compliance

GDPR Compliance

Under GDPR Article 6(1)(f), strictly necessary cookies for:

• Authentication
• Security
• Service functionality

Do not require explicit consent as they serve legitimate interests.

UK GDPR / PECR Compliance

Under UK Privacy and Electronic Communications Regulations (PECR), cookies that are strictly necessary for:

• Communication transmission
• Service provision explicitly requested by the user

Are exempt from consent requirements.

Cookie List

Cookie Name	Purpose	Duration	Type
CF_Authorization	Cloudflare Access authentication	Session	Strictly Necessary
__cf_bm	Cloudflare Bot Management	30 minutes	Strictly Necessary
cf_clearance	Cloudflare security challenge	30 minutes	Strictly Necessary

Note: Actual cookie names may vary based on Cloudflare configuration.

No Tracking

We want to emphasize:

• We do not track your browsing behavior
• We do not build advertising profiles
• We do not sell cookie data to third parties
• We do not use cookies for purposes beyond authentication and security

Your privacy is important to us.