Cookie Policy

1. Strictly necessary

These are always on. Without them the parts of the site you asked for do not work.

• Session cookies - a session cookie and a refresh cookie, set when you sign in, to keep you signed in securely. They expire with your sign-in session and are removed when you log out.
• Sign-in flow cookies - short-lived cookies set while you sign in with Google, to protect the sign-in flow against forgery and return you to the right page. They are removed as soon as sign-in completes.
• Preference storage - local browser storage for interface preferences such as your theme (dark/light) and layout choices (for example sidebar width). This never leaves your browser. Your answer to the consent banner is stored here too, so we can stop asking.
• Payment pages - when you upgrade, the checkout is hosted by Stripe, which sets cookies on its own pages for security and fraud prevention. See Stripe's cookie policy.
• Sign-up bot check - the sign-up form runs a Cloudflare Turnstile check, which may store a short-lived value in your browser to record that it passed. We treat it as strictly necessary because the sign-up you asked for cannot be completed without passing the check. Cloudflare also sets cookies of its own for diagnosing problems with the challenge, which are not necessary to your sign-up; see Cloudflare's Turnstile privacy documentation.

2. Advertising measurement, only if you accept

We run ads for Pogo through Google Ads, and we want to know which of them lead somewhere rather than paying for ones that do not. To measure that, Google's tag can store an identifier in your browser that links your visit to the ad you clicked, and to a sign-up if you make one.

If you decline, or simply never answer, your browser never contacts Google at all. We do not load Google's tag until you have accepted, so there is no request to Google, nothing stored, and nothing for Google to see - not your IP address, not your browser, not the page you are on. Declining costs you nothing: every part of Pogo works the same either way, and we will not ask again unless you reopen the banner yourself.

If you do accept, the tag runs on our public pages: the marketing pages, pricing, the legal pages, and the login and sign-up pages. We do not load it inside the product, and we do not load it on a shared board or room link. Where we tell Google which page you are on, we send the address with the query string removed apart from the parameters Google itself uses to recognize an ad click, so a private link is never part of it.

Google's own account of what it does with this is in Google's advertising policy, and Google is listed on our Subprocessors page.

3. Changing your mind

Use the Cookie settings link in the footer of our marketing and legal pages to reopen the banner and change your answer. Withdrawing is one click, exactly as accepting was. A change applies immediately; anything already stored under a previous acceptance can be cleared in your browser settings.

You can also clear or block cookies in your browser settings generally, but blocking the session cookie will prevent you from staying signed in.

4. More information

How we handle personal data more broadly is covered in the Privacy Policy. Questions: support@podratic.com.