Cookies
PalletFlow only uses functional cookies: to sign you in and keep you signed in, and to remember settings you choose (language) or that follow your device (time zone). There are no analytics, advertising or third-party cookies.
Cookies
- Name
- authjs.session-token
- What it is for
- Keeps you signed in. It holds only a random session ID; your account details stay on our server.
- How long it lasts
- 30 days, renewed at most once a day while you use the app. Removed when you sign out.
- Name
- authjs.csrf-token
- What it is for
- Protects the sign-in and sign-out forms against forged requests from other sites.
- How long it lasts
- Until you close the browser.
- Name
- authjs.callback-url
- What it is for
- Remembers which page to bring you back to after you sign in.
- How long it lasts
- Until you close the browser.
- Name
- authjs.pkce.code_verifier
- What it is for
- Set only while you sign in with Google, so that the sign-in can be completed securely.
- How long it lasts
- 15 minutes, and removed as soon as the sign-in finishes.
- Name
- app_lang
- What it is for
- Remembers the language you picked (EN or EL). Set only when you pick one.
- How long it lasts
- 1 year.
- Name
- tz
- What it is for
- Your device's time zone, so that deadlines and times are shown in your local time. It is read from your device's clock setting, never from your location.
- How long it lasts
- Until you close the browser.
On the live site (HTTPS) the sign-in cookies carry a __Secure- or __Host- prefix, for example __Secure-authjs.session-token. The prefix tells the browser to send them only over a secure connection.
Browser storage
Signing in with an email code, and one admin tool, also keep a small note in your browser's own storage. It is never sent to our server.
- Name
- pf_login_email
- Where
- sessionStorage
- What it is for
- The email we sent your sign-in code to, so that you don't have to type it again on the next screen. Removed once you sign in.
- How long it lasts
- Until you close the tab.
- Name
- cmr:sessionChoice
- Where
- sessionStorage
- What it is for
- The carrier and vehicle last picked in the CMR wizard, to pre-fill the next CMR.
- How long it lasts
- Until you close the tab.
- Name
- cmr:lastByConsignee:…
- Where
- localStorage
- What it is for
- The carrier and vehicle last used for each consignee in the CMR wizard, to pre-fill the next CMR for them.
- How long it lasts
- Until you clear your browser's site data.
Removing them
You can delete cookies and site data at any time in your browser's settings. Deleting the session cookie signs you out, and the app will show English and your device's time zone again until you choose otherwise.