Skip to content

Legal

Cookie Policy

The cookies and local storage Pikorua Security uses, what each one is for, how long it lasts, and the controls you have over the optional ones.

Last updated 2 min readPikorua Security Private Limited
Contents (7 sections)
  1. 1.What this policy covers
  2. 2.Categories we use
  3. 3.Cookies and storage we set
  4. 4.What we do not use
  5. 5.Your choices
  6. 6.Browser controls
  7. 7.Changes and contact

1.What this policy covers

This policy explains the cookies and similar technologies, such as browser local storage, that Pikorua Security uses on pikoruasecurity.com, in the Pikorua Security application and on the zero-login upload pages we send to vendors and brokers. It supplements our Privacy Policy.

A cookie is a small text file a website stores in your browser so it can recognize the same browser later. Local storage works in a similar way but stays on your device and is never sent to our servers automatically. We list both below and treat them the same way.

2.Categories we use

  • Strictly necessary: sign-in, security, single sign-on, broker upload sessions and fraud prevention on the billing page. These are always on because the service cannot work without them.
  • Preferences: remember how you like your workspace, such as table density and saved vendor filters.
  • Analytics: first-party counts of page views and feature use, and Datadog browser performance sessions that help us find slow screens.
  • Support: keep a Zendesk support chat attached to your browser while you move between pages.

3.Cookies and storage we set

We set 11 cookies and local storage keys in total. Names beginning with __Host- can only be set over HTTPS by our own domain and are never shared with subdomains.

Cookies and local storage keys used by Pikorua Security
NameProviderCategoryPurposeDuration
__Host-ct_sessionCookiePikorua SecurityStrictly necessaryKeeps you signed in to app.pikoruasecurity.com and ties requests to your workspaceSession; ends after 12 hours idle
__Host-ct_csrfCookiePikorua SecurityStrictly necessaryProtects forms and API calls against cross-site request forgerySession
ct_sso_stateCookiePikorua SecurityStrictly necessaryCarries the SAML relay state while you sign in through your identity provider10 minutes
ct_upload_tokenCookiePikorua SecurityStrictly necessaryLets a broker or vendor finish a zero-login upload without creating an account24 hours
ct_consentLocal storagePikorua SecurityStrictly necessaryRemembers the cookie choices you make on this page12 months
ct_uiLocal storagePikorua SecurityPreferencesRemembers table density, last open project and vendor list filters12 months
ct_aidCookiePikorua SecurityAnalyticsFirst-party, pseudonymous ID used to count page views and feature use; never shared with ad networks13 months
_dd_sCookieDatadogAnalyticsGroups browser performance events into one session so we can find slow pages15 minutes, extended while active (4 hours max)
__stripe_midCookieStripeStrictly necessaryFraud prevention on the billing page when you pay by card1 year
__stripe_sidCookieStripeStrictly necessaryFraud prevention for a single billing session30 minutes
__zlcmidCookieZendeskSupportKeeps your support chat conversation attached to your browser1 year

4.What we do not use

We do not use advertising cookies, cross-site tracking pixels or social media trackers, and we do not let ad networks or data brokers set cookies through our site. We do not sell personal data or share it for cross-context behavioral advertising.

Deficiency notices and renewal requests sent to vendors and brokers contain no tracking pixels. Pikorua Security records when an upload link is opened, which tells the customer a broker is working on the request without monitoring anyone's inbox.

5.Your choices

Optional categories are off until you turn them on. Use the panel below to change them at any time; strictly necessary cookies cannot be switched off. Your choice is saved in this browser under the local storage key ct_consent for 12 months; clearing your browser's site data resets it, and we will ask again.

If your browser sends a Global Privacy Control signal, we treat it as an opt-out and keep analytics off unless you switch analytics on yourself.

6.Browser controls

Most browsers let you block or delete cookies in their privacy settings, and private browsing windows discard cookies when closed. If you block strictly necessary cookies, you will not be able to sign in to Pikorua Security or complete a broker upload.

7.Changes and contact

We update this policy and the table above whenever we add, remove or change a cookie, and change the date at the top of this page. Questions go to privacy@pikoruasecurity.com.