This Cookie Policy is provided for general information and is not legal advice.
This Cookie Policy explains how Pushoney's portal at
portal.pushoney.com uses cookies and similar
technologies. It does not cover cookies set by customer-operated
websites that integrate the Pushoney embed snippet — those are
governed by each customer's own cookie policy.
The portal sets two strictly necessary cookies (no prior consent required under EU ePrivacy Directive Art. 5(3)) and optionally loads Google Analytics 4 cookies on visitor consent.
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
pp_portal |
Authenticated session — remembers that you are logged in across page loads. Required for the portal to function. Strictly necessary. | HttpOnly, Secure, SameSite=Lax, signed | 30 days, sliding |
pp_attr |
UTM/source attribution capture for the iOS-PWA install flow — preserves attribution across the "Add to Home Screen" → standalone-mode subscribe path, where browser session storage is cleared. Required for accurate attribution. Strictly necessary. | HttpOnly, Secure, SameSite=Lax, signed | 24 hours |
_ga, _ga_* |
Google Analytics 4 — measures aggregate visitor and
page-view counts so we can see what works on the
marketing pages. Optional. Loaded only
after the visitor clicks "Accept" in the consent banner;
no GA network call is made before consent. Choice is
stored in localStorage under
pushoney_consent. |
Third-party (Google), set by the gtag script in the visitor's browser | 2 years (_ga) / configurable
(_ga_*) |
The two strictly necessary cookies above are exempt from consent under EU ePrivacy Art. 5(3) and Morocco Law 09-08: they are used solely to provide the service explicitly requested by the user.
The Google Analytics cookies are non-essential and are loaded
only after the visitor accepts via the consent banner that
appears at the bottom of every page on first visit. Declining
or ignoring the banner means GA is never loaded — no network
call to googletagmanager.com is made and no GA
cookies are set. When loaded, the GA cookies
(_ga, _ga_*) are written
first-party on
portal.pushoney.com by the gtag script running
in your browser; Google receives anonymised aggregate event
data, not the cookie values themselves. The visitor's
consent choice is stored client-side in
localStorage (key pushoney_consent,
values accepted / declined) and
can be reset by clearing the site's localStorage.
Pushoney does not currently implement IAB Transparency & Consent Framework (TCF) signalling. The opt-in mechanism is a single binary choice; there are no third-party advertising or social-tracking cookies to consent to.
When a customer of Pushoney embeds our subscribe snippet on their website, the snippet itself does not set cookies on the customer's domain. It does invoke browser APIs (Service Workers, the Push API, the Notifications API) which operate independently of cookies.
A customer who has enabled Pushoney monetisation surfaces a short disclosure to their subscribers stating that the subscriber may receive promotional notifications from Pushoney's partners. That disclosure is part of the customer's own privacy / consent flow and not a cookie.
You can clear or block cookies at any time via your browser
settings. Blocking pp_portal will log you out of
the portal; blocking pp_attr will reduce
attribution accuracy on the iOS-PWA install path but otherwise
has no effect on functionality. To revoke a previous Google
Analytics consent, clear pushoney_consent from
your browser's localStorage for this site (the banner will
re-appear on the next page load).
Questions about this Cookie Policy can be sent to
[email protected].