Document 03

Cookie Policy

Every cookie Pestren sets, itemised. There is no consent wall on this site because there is nothing here to consent to — the list below is the whole of it.

Effective 23 September 2026 · Version 1.0 · Read alongside the Privacy Policy

1Why there is no cookie banner

There are no advertising, analytics or tracking cookies anywhere in Pestren. Our page-view analytics (Vercel Web Analytics) is cookieless and builds no cross-site profile of you.

That leaves only strictly necessary cookies — the ones without which sign-in and the invite gate cannot function. Under the ePrivacy Directive and the DPDP Act, strictly necessary cookies require disclosure, not consent. So this page exists instead of an Accept/Reject dialog, which here would be theatre: there would be nothing to reject.

If we ever add a third-party analytics or advertising tool, this page will be replaced by a real consent manager and you will be asked before anything is set.

2The cookies we set

CookieSet byPurposeLife
__sessionClerkKeeps you signed in across page loadsSession
__client_uatClerkTells the app whether a signed-in session exists, so it does not flash a signed-out state7 days
pestren_gatePestrenRemembers that your invite code was verified. httpOnly and signed, so it cannot be read or forged in the browser.Session

None of these are shared with an advertiser, a data broker or any party other than the processor that sets them. Clerk’s role is described in Privacy §3.2 and §5.

3Not cookies, but disclosed anyway

Cookies are not the only thing stored in your browser, and it would be a thin kind of honesty to itemise the cookies and stay quiet about the rest. Pestren also uses:

StoreWhat it holdsWhy
localStorageYour field boundaries, Assistant chat history and invite codeSo the workspace survives a reload and works offline. Your chat history lives here and not on our servers.
sessionStorageA per-tab cache of query resultsSo reopening a panel does not re-fetch data you already loaded.

Both are cleared when you clear site data for this domain, which also signs you out and removes locally held fields that have not been synced.

4Controlling cookies

You can block or delete cookies in your browser settings. Blocking the three above will sign you out and prevent the invite gate from remembering you, so the application will not be usable — they are load-bearing, which is precisely what makes them strictly necessary.

Questions about anything on this page: core@pestren.com.