Cookie Policy

Everything we place is listed below. Storage falls into three browser APIs: sessionStorage (cleared when the tab closes), localStorage (persists until you clear it), and one tiny cookie for the privacy notice.

• Session token — sessionStorage. Keeps you signed in to the dashboard. Cleared when the tab closes; clearing it signs you out.
• Admin session backup — sessionStorage. While a staff member is viewing your account ("logged in as"), their own admin session is parked here so "Exit portal" can restore it; cleared when the tab closes.
• In-progress checkout order — sessionStorage. Attaches your order id to the current tab while you complete payment, so a refresh mid-checkout resumes the same order; cleared as soon as the order resolves.
• Anonymous checker quota — localStorage. Lets the free SEO Checker remember your 2 free checks per day without requiring an account.
• Billing preference — localStorage. Remembers your chosen currency (USD or INR) and billing cycle (monthly or annual) so pricing pages do not flip-flop between visits.
• Country list cache — localStorage. Caches the countries dropdown in the keyword-research tool for 7 days. The server list is always the source of truth; the cache only makes the dropdown open instantly.
• Report branding — localStorage. Remembers the company name and logo you set for print-ready reports.
• Slack alert webhook — localStorage. Stores the Slack webhook URL you paste into Alerts so rank-alert notifications can post to your channel.
• Consent notice — cookie (pylon_consent). Records whether you chose Accept or Reject on the bottom-of-page privacy notice so it stays hidden for one week. Strictly functional; it never tracks you. The weekly expiry means the notice politely re-asks when the choice lapses (or if you clear cookies), rather than asserting a permanent consent wall.
• Nothing else. No third-party marketing cookies, no fingerprinting, no cross-site tracking.

The storage listed above is strictly necessary for the site to function, which means EU ePrivacy rules do not require consent for it. The notice still offers an Accept or Reject choice so handling your preference is familiar — but because there are no analytics or advertising cookies to switch off, both choices do the same thing: they record your preference and hide the notice for one week.

The notice is non-blocking — you can use the full site without touching it — and if we ever add non-essential trackers (for example, identifying conversion analytics), we will replace it with a real choice that actually switches something and ask before turning them on.

The one-week window follows the standard consent-retention practice under ePrivacy and the GDPR. Clear your cookies and the notice reappears.

A traditional cookie wall exists to separate strictly-necessary storage from optional marketing trackers. Pylon has no marketing trackers, so separating them would be a fiction. The notice exists purely for transparency: it tells you what we store, re-asks once a week, and never gets in the way.

We may use aggregate, privacy-respecting page analytics to understand which pages are helpful and which are not. It does not identify individual visitors, and you can disable it in your browser settings.

sessionStorage and localStorage are controlled from your browser’s per-site settings ("Cookies and site data", "Clear browsing data", and similar). Clearing the session token signs you out; clearing the other keys only resets a preference or cache.

Clearing browser storage never touches your account, licences or order history — that data lives server-side and is governed by the Privacy Policy.