Legal

Cookies

Pileform sets six essential cookies: pileform_session (when you sign in), pileform-theme (your light or dark preference), pileform-lang, NEXT_LOCALE and pf_locale (the language you chose, only once you switch it; the last two are the ones the app reads, so your choice follows you into it), and pileform-cookie-notice (remembers you dismissed this acknowledgement). No advertising trackers, no analytics cookies, no third-party cookies. Because of that, there is no consent banner: every cookie we set qualifies as “strictly necessary” or “preference set on user action” under EU ePrivacy/GDPR rules.

Last updated: 23 October 2026

The full list

pileform_session

  • Set by: app.pileform.com (the workspace), only after sign-in
  • Purpose: keeps you signed in across requests
  • Lifetime: until your session ends or you sign out
  • Properties: first-party, HTTP-only, Secure, SameSite=Lax
  • Why it’s exempt: strictly necessary for an authenticated service to work

pileform-theme

  • Set by: pileform.com or app.pileform.com, only when you click the light/dark toggle
  • Purpose: remembers whether you prefer light or dark mode
  • Lifetime: 1 year, refreshed each visit
  • Properties: set on parent domain .pileform.com so the same preference applies on both the marketing site and the workspace; SameSite=Lax; Secure in production
  • Why it’s exempt: a preference cookie set in direct response to your action; ePrivacy exemption for “strictly necessary for a service explicitly requested by the user”

pileform-lang

  • Set by: pileform.com, only when you switch language in the header
  • Purpose: remembers the language you chose, so the site opens in it next time
  • Lifetime: 1 year
  • Properties: set on parent domain .pileform.com; SameSite=Lax; Secure in production
  • Why it’s exempt: a preference cookie set in direct response to your action

NEXT_LOCALE

  • Set by: pileform.com, only when you switch language, alongside pileform-lang
  • Purpose: carries the same choice to the workspace; the earlier version of the workspace reads it
  • Lifetime: 1 year
  • Properties: set on parent domain .pileform.com; SameSite=Lax; Secure in production
  • Why it’s exempt: a preference cookie set in direct response to your action

pf_locale

  • Set by: pileform.com when you switch language, or app.pileform.com when you choose one there
  • Purpose: the language the workspace opens in (en or el)
  • Lifetime: 1 year
  • Properties: set on parent domain .pileform.com; SameSite=Lax; Secure in production
  • Why it’s exempt: a preference cookie set in direct response to your action

pileform-cookie-notice

  • Set by: pileform.com, when you close the cookie notice
  • Purpose: remembers that you closed the notice, so it is not shown again
  • Lifetime: 1 year
  • Properties: set on parent domain .pileform.com; SameSite=Lax; Secure in production
  • Why it’s exempt: a preference cookie set in direct response to your action

Things we don’t set

  • No advertising trackers (no Facebook Pixel, no Google Ads, no LinkedIn Insight, no TikTok)
  • No third-party analytics cookies (our marketing-site web analytics is cookie-less and doesn’t identify individuals)
  • No cross-site tracking
  • No fingerprinting attempts
  • No third-party tag managers

Local storage and session storage

The marketing site and the workspace use localStorage for two things: caching your theme preference (mirrors the cookie above) and caching your auth context inside the workspace so a page reload doesn’t flicker. Neither value ever leaves your browser. sessionStorage is used for two things: remembering whether you dismissed the “verify your email” banner for the current tab, and, if you followed a partner’s referral link, holding that referral code. It stays in the tab and is only forwarded to the workspace when you go to sign up.

Analytics

The marketing site (pileform.com) uses a cookie-less web analytics service. It is cookie-less, does not fingerprint, does not track users across sites, and counts visits in aggregate. The workspace (app.pileform.com) uses an EU-hosted product-analytics provider, described in our privacy policy; it stores no analytics identifier on your device.

Changing your mind

You can clear cookies for pileform.com at any time from your browser settings. Doing so will sign you out of the workspace, reset your theme to the default, and show the cookie notice again on next visit. There is nothing else stored.

Questions? Email contact@pileform.com.