1What cookies are
A cookie is a small text file a website stores in your browser. Local storage and session storage are similar browser features. In this policy, "cookies" covers all of them.
First-party cookies are set by our own websites. Third-party cookies are set by another company's service that our page uses.
2Your choice
When you first visit, a banner asks about two kinds of cookies: Analytics and Marketing. Accept allows both, Decline allows neither, and Decline is as easy as Accept. Under Settings you can allow each one separately. If you decline, or do not answer, we set only essential cookies.
Your answer is stored for 180 days and applies to pugi.io, logo.pugi.io and app.pugi.io; pugi.dev and docs.pugi.dev ask separately. To change it, use Cookie settings at the bottom of any page. If you withdraw Analytics, we delete the Google Analytics cookies and stop PostHog. If you withdraw Marketing, we delete the referral cookies and stop the advertising pixels. Cookies those pixels already set stay until they expire or you delete them in your browser, unless the pixel removes them itself. If you allowed Marketing before we used advertising pixels, we ask you again.
3Essential cookies (always on)
- pugi_marketing_consent_version
- records that your Marketing choice was made on the wording that includes advertising. First-party, all pugi.io sites, 180 days.
- pugi_cookie_consent
- remembers your choice: accept (Analytics and Marketing), reject (neither), analytics or marketing (only that one). First-party, all pugi.io sites, 180 days. A copy is kept in local storage as cf_cookie_consent.
- Sign-in cookies on app.pugi.io
- keep you signed in and protect sign-in forms against forged requests (the session, CSRF and callback cookies of our sign-in system). First-party. The session lasts up to 14 days; the others end when you close the browser.
- Security cookies from Cloudflare
- our network provider may set cookies that tell people from bots, for example on the free website check. Third-party, short-lived.
4Preferences
- pugi-theme
- remembers light, dark or system theme across pugi.io and app.pugi.io. First-party cookie shared by pugi.io subdomains, kept for up to one year; local storage is a fast local cache.
- pugi:chat:history:v1
- keeps the conversation with the chat on pugi.io while the tab is open. Session storage, deleted when you close the tab.
5Analytics (only after you allow Analytics)
- Google Analytics 4 and Google Tag Manager
- measure visits and conversions across pugi.io, app.pugi.io, pugi.dev and docs.pugi.dev. Cookies _ga and _ga_* last up to two years. Google Analytics loads only after you allow Analytics. Google Tag Manager loads after you allow Analytics or Marketing and runs only the tags for what you allowed. Before that, nothing is sent to Google.
- PostHog
- measures which features are used and records sessions so we can see where people get stuck. Recordings mask all text and every input you type. PostHog stores an identifier in a cookie and in local storage named after our project (ph_*), kept for up to a year. It is not loaded at all until you allow Analytics.
6Marketing: referral cookies (only after you allow Marketing)
Our affiliate program runs on Affonso. Its script loads, and these first-party cookies are set, only after you allow Marketing. If you arrived through a partner's link and allow Marketing on that page, the cookies remember the referral for 30 days so that, if you sign up or pay, the partner who sent you gets the credit. Until you allow it, the referral is kept only in the open page and is not stored. The cookies do not contain your name or email address.
- affonso_referral, pugi_affonso_referral
- the partner's referral code. 30 days.
- pugi_ref, pugi_ref_src
- the referral code and where it came from, for our own referral program. 30 days.
7Marketing: advertising (only after you allow Marketing)
On pugi.io and logo.pugi.io we use pixels from Meta, OpenAI and Reddit, loaded through Google Tag Manager, to measure our ads and show them to people likely to be interested. They can set cookies and send those companies your IP address, browser details, the pages you visit and an advertising identifier, which they may use under their own policies.
- Meta Pixel (Meta Platforms)
- cookies such as _fbp and _fbc, set by Meta.
- OpenAI Measurement Pixel (ChatGPT ads)
- __oppref, the reference of the ChatGPT ad you came from, 30 days; __obref, a random reference for your browser, 365 days. It also sends the page address and, where it is turned on, details from the page such as an email address, hashed in your browser first.
- Reddit Pixel (Reddit, Inc.)
- cookies such as _rdt_uuid and _rdt_cid, set by Reddit.
8Cookies on other companies' pages
When you pay, you go to a checkout run by Stripe and Link, or by Polar for older subscriptions. When you sign in with Google, GitHub or Apple, you go to their sign-in page. Those pages set their own cookies under their own policies.
9Desktop app, extensions and command-line tool
Our desktop app and browser extensions do not show a cookie banner. They send usage statistics, never your code or briefs, unless you turn off the "Send usage statistics" or analytics setting. The Pugi Prompt Enhancer policy at pugi.io/prompt-enhancer/privacy describes the extension in detail.
10Cookies in Your Apps
Apps you build and publish with Pugi are yours. If Your App uses cookies or analytics, you are responsible for telling your users and asking for their consent where the law requires it.
11Controlling cookies in your browser
Every major browser lets you see, block and delete cookies. If you block essential cookies, signing in will not work.
12Changes and contact
When we add or change a cookie, we update this page and its version and date. Questions: [email protected].