Cookie policy

A cookie is a small file placed on your device when you visit a site. This page describes, exhaustively, what Paco places in your browser: two cookies, both strictly necessary, and a few display settings kept locally.

Strictly necessary cookies

Name	Purpose	Duration	Type
session	Keep your authenticated login session and secure exchanges	14 days if you tick "stay signed in" at login; otherwise until the browser is closed	Strictly necessary
lang	Remember the language you chose (French or English)	12 months, only if you switch language through a ?lang= link	Strictly necessary (preference)

These cookies are exempt from prior consent because they are strictly necessary to provide a service you expressly asked for (signing in to your account, or remembering a language you chose), in line with the CNIL's guidelines. That is why the banner shown on your first visit is a notice, not a consent request: there is nothing to accept or refuse.

Local storage (no cookie)

Some display settings are kept in your browser's localStorage. They never leave your device and are not sent to the server:

Key	Purpose	Duration
ovs_cookie_ack	Remember that you have read the information banner	Until the site's data is cleared
theme	Light or dark theme of the application	Until the site's data is cleared
ovs_tour_done_v1	Remember that the application's guided tour has already been seen by this account	Until the site's data is cleared
paco.*.collapsed	Remember the panels you collapsed	Until the site's data is cleared

While you use the application, the browser's sessionStorage also holds, for the current tab only: the setup answers in progress (and, during setup, the access token of your property management system, kept until it has been used to connect it), the language, and a few display states (a banner you dismissed, a panel left open). All of it is strictly necessary, is not a cookie, and is cleared when the tab is closed or when you sign out.

No analytics, no third-party cookies

Paco uses no audience-measurement (analytics), advertising, profiling or social-network cookies, and no third-party tracker. No analytics script is loaded on any page, public or signed-in. No cookie is set by a domain other than the site's own.

Technical resources

Fonts (Archivo, Bricolage Grotesque) are hosted on this site. No page, including public pages viewed without an account, calls fonts.googleapis.com or fonts.gstatic.com, so none sends your IP address to Google to display text.

Managing and clearing

You can at any time configure your browser to block or delete the site's cookies and local storage (usually: browser settings, "Privacy", "Site data", then search for pacoapp.io). Blocking the session cookie will however prevent you from signing in; clearing local storage simply brings the information banner back and resets the theme to its default.

No sale or share

Paco does not sell personal information and does not share it for cross-context behavioural advertising, as those words are used in the California Consumer Privacy Act. There is therefore no "Do Not Sell or Share My Personal Information" link on this site: that link is required of a business that sells or shares, and we do neither. Using a host or an AI provider as a processor under instruction is not a sale or a share.

A visitor from the United States is served the same two cookies as any other visitor. There is no extra US cookie and no optional-cookie choice, because there is nothing optional to choose.

Learn more

See our privacy policy for details of personal data processing.