Cookie Policy
This policy explains how the PASS website and desktop app use cookies and similar technologies (such as local storage and SDKs), and how you can control them. It should be read with our Privacy Policy.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. Similar technologies — local storage, pixels and software development kits (SDKs) in our apps — perform comparable functions. We refer to all of them as "cookies" here.
2. What we actually use
PASS keeps this deliberately minimal. We use only strictly-necessary cookies and a small amount of local storage on your own device. We do not use analytics, advertising, or cross-site tracking cookies, and we do not sell or share your browsing activity.
| What | What it does |
|---|---|
Strictly-necessary cookies (pb_at, pb_rt) | Keep you signed in and secure your session. They are essential — the Service will not work without them — and are exempt from consent under PECR. |
| Local storage (on your device) | Remembers preferences such as your language and display settings so the app behaves the way you expect. This stays on your device, is not a tracking cookie, and is not shared with us or any third party for tracking. |
3. Do we show a cookie banner?
No. Because we set only strictly-necessary cookies and store preferences locally on your device, no consent is required under the UK Privacy and Electronic Communications Regulations (PECR), so we do not display a cookie-consent banner. You can still clear or block cookies and local storage through your browser or device settings — but strictly-necessary cookies cannot be turned off without breaking core features like staying signed in.
4. How long they last
Your session cookie is short-lived and your sign-in refreshes it; both are removed when you sign out. Local-storage preferences remain on your device until you clear them or your browser removes them.
5. Legal basis
Strictly-necessary cookies are exempt from the consent requirement under PECR, and we set them on the basis of our legitimate interests in operating a secure Service. We do not set any cookie that would require your consent, so no consent flow is needed.