Legal

Cookies.

Pileform sets three essential cookies: pileform_session (when you sign in), pileform-theme (your light or dark preference), and pileform-cookie-notice (remembers you dismissed this acknowledgement). No advertising trackers, no analytics cookies, no third-party cookies. Because of that, there is no consent banner: every cookie we set qualifies as “strictly necessary” or “preference set on user action” under EU ePrivacy/GDPR rules.

Last updated: 18 August 2026

The full list

pileform_session

  • Set by: app.pileform.com (the workspace), only after sign-in
  • Purpose: keeps you signed in across requests
  • Lifetime: until your session ends or you sign out
  • Properties: first-party, HTTP-only, Secure, SameSite=Lax
  • Why it’s exempt: strictly necessary for an authenticated service to work

pileform-theme

  • Set by: pileform.com or app.pileform.com, only when you click the light/dark toggle
  • Purpose: remembers whether you prefer light or dark mode
  • Lifetime: 1 year, refreshed each visit
  • Properties: set on parent domain .pileform.com so the same preference applies on both the marketing site and the workspace; SameSite=Lax; Secure in production
  • Why it’s exempt: a preference cookie set in direct response to your action; ePrivacy exemption for “strictly necessary for a service explicitly requested by the user”

Things we don’t set

  • No advertising trackers (no Facebook Pixel, no Google Ads, no LinkedIn Insight, no TikTok)
  • No third-party analytics cookies (we use Cloudflare Web Analytics, which is cookie-less and doesn’t identify individuals)
  • No cross-site tracking
  • No fingerprinting attempts
  • No third-party tag managers

Local storage and session storage

The marketing site and the workspace use localStorage for two things: caching your theme preference (mirrors the cookie above) and caching your auth context inside the workspace so a page reload doesn’t flicker. Neither value ever leaves your browser. sessionStorage is used for two things: remembering whether you dismissed the “verify your email” banner for the current tab, and, if you followed a partner’s referral link, holding that referral code. It stays in the tab and is only forwarded to the workspace when you go to sign up.

Analytics

The marketing site (pileform.com) uses Cloudflare Web Analytics. It is cookie-less, does not fingerprint, does not track users across sites, and counts visits in aggregate. The workspace (app.pileform.com) has no analytics.

Changing your mind

You can clear cookies for pileform.com at any time from your browser settings. Doing so will sign you out of the workspace, reset your theme to the default, and show the cookie notice again on next visit. There is nothing else stored.

Questions? Email contact@pileform.com.