The short version. We use a small set of essential cookies to run pazau.com and keep it secure. Analytics and advertising cookies load only if you choose Accept all. You can change your choice at any time from Cookie settings in the footer. If your browser sends a Global Privacy Control signal, we turn advertising cookies off automatically. Every cookie we use is listed below.
What this policy covers
This Cookie Policy explains how Pazau, Inc. and its affiliates ("Pazau," "we") use cookies and similar technologies on pazau.com, docs.pazau.com, status.pazau.com, and app.pazau.com (the "Sites"). It also describes the storage used by the Pazau messenger widget that our customers embed on their own websites. It supplements our Privacy Policy.
What cookies are
A cookie is a small text file a website stores in your browser. Local storage and session storage are similar browser features that store data without sending it to the server on every request. Pixels (also called tags or beacons) are small pieces of code that report an event, such as a page view, to a server. In this policy, "cookies" means all of these.
- First-party cookies are set by the site you are visiting (pazau.com).
- Third-party cookies are set by another domain, such as an analytics or advertising provider.
- Session cookies expire when you close your browser. Persistent cookies remain until they expire or you delete them.
How we ask for consent
When you first visit, a banner offers two choices: Accept all or Essential only. Until you choose, only essential cookies load. Your choice is stored in pz-cookie-consent on your device.
- Visitors from the EEA, UK, and Switzerland: analytics and advertising cookies never load without your consent.
- Visitors from the US and elsewhere: we apply the same consent-first approach, so the experience is the same everywhere.
- Global Privacy Control: if your browser sends a GPC signal, we treat it as Essential only for advertising cookies, regardless of any earlier choice. See Your privacy choices.
To change your choice, select Cookie settings in the footer of any page. Withdrawing consent stops new data collection. It does not delete cookies already set, which you can delete in your browser settings.
Cookies we use on our Sites
Strictly necessary
These cookies are required for the Sites to work and cannot be turned off. They do not track you across other websites. We rely on the "strictly necessary" exemption under the ePrivacy Directive and PECR.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
pz-cookie-consent |
Pazau (first party, local storage) | Records whether you chose Accept all or Essential only, so we don't ask again | Persistent until you clear site data; we ask again after 12 months or when this policy changes materially | Strictly necessary |
__Host-pz-session |
Pazau (first party) | Keeps you signed in to app.pazau.com and gated resources on pazau.com. Secure, HttpOnly, host-only, SameSite=Lax | Session; idle timeout of 12 hours or the timeout set by your workspace administrator | Strictly necessary |
__Host-pz-csrf |
Pazau (first party) | Protects forms and sign-in against cross-site request forgery | Session | Strictly necessary |
pz-gpc |
Pazau (first party) | Records that an opt-out preference signal was detected, so it applies across pages | Session | Strictly necessary |
pz-region |
Pazau (first party) | Routes sign-in to the right data region (US or EU) for your workspace | 12 months | Strictly necessary |
__cf_bm |
Cloudflare | Distinguishes people from bots to protect the Sites from abuse | 30 minutes | Strictly necessary |
cf_clearance |
Cloudflare | Records that you passed a security challenge | 30 minutes | Strictly necessary |
_cfuvid |
Cloudflare | Applies rate limits fairly to visitors who share an IP address | Session | Strictly necessary |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention when you pay by card in the Pazau app | 12 months; 30 minutes | Strictly necessary |
Functional
These cookies remember your preferences and power features you ask for. They load with essential cookies, and we don't use them for analytics or advertising.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
pz-locale |
Pazau (first party) | Remembers your language choice | 12 months | Functional |
pz-theme |
Pazau (first party, local storage) | Remembers light or dark mode on docs.pazau.com | Persistent until cleared | Functional |
pz_msgr_vid |
Pazau (first party) | Lets the Pazau assistant on our Sites continue your conversation across pages and visits | 12 months | Functional |
pz_msgr_sess |
Pazau (first party, session storage) | Holds the current chat session with the Pazau assistant | Session | Functional |
__cp_session |
Chili Piper | Keeps the demo-scheduling calendar working after you submit the demo form | Session | Functional |
Analytics
These cookies help us understand how visitors use the Sites, such as which pages are read and where people drop off. They load only if you choose Accept all. We configure Google Analytics with IP anonymization and without Google Signals, and we do not send it names or email addresses.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes unique visitors | 13 months | Analytics |
_ga_<container-id> |
Google Analytics 4 | Persists session state | 13 months | Analytics |
ph_phc_<project>_posthog |
PostHog (EU cloud) | Measures product-page funnels and feature interest | 12 months | Analytics |
hubspotutk |
HubSpot | Associates form submissions with a visitor so we can route your request | 6 months | Analytics |
__hstc |
HubSpot | Tracks visits, including first and last visit time | 6 months | Analytics |
__hssc |
HubSpot | Determines whether to count a new session | 30 minutes | Analytics |
__hssrc |
HubSpot | Detects when you restart your browser | Session | Analytics |
Advertising
These cookies measure our ad campaigns and let us show Pazau ads to people who visited our Sites. They load only if you choose Accept all and are blocked when we detect a GPC signal. Under some US state laws, these may amount to "sharing" or "targeted advertising." You can opt out at any time.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
li_sugr |
LinkedIn Insight Tag | Probabilistic browser identifier for ad measurement | 90 days | Advertising |
bcookie |
Browser identifier for ad delivery | 12 months | Advertising | |
lidc |
Routing for LinkedIn's data centers | 24 hours | Advertising | |
UserMatchHistory |
Syncs LinkedIn ad IDs | 30 days | Advertising | |
AnalyticsSyncHistory |
Records the last sync with LinkedIn analytics | 30 days | Advertising | |
_gcl_au |
Google Ads | Measures ad conversions, such as demo requests | 90 days | Advertising |
IDE |
Google (doubleclick.net) | Measures and retargets Google display ads | 13 months | Advertising |
_rdt_uuid |
Reddit Ads | Measures ad conversions | 90 days | Advertising |
_uetsid, _uetvid |
Microsoft Advertising | Measures Bing search ad conversions | 1 day; 13 months | Advertising |
We review this list each quarter using an automated cookie scan and update it when anything changes.
Storage used by the Pazau messenger on customer websites
Our customers embed the Pazau messenger on their own websites and apps. When it loads, it uses the storage below to keep conversations working. The customer is the controller for this data and decides whether and how to request consent. Pazau processes it as a processor under the Data Processing Addendum. The messenger does not set any analytics or advertising cookies, and it does not track visitors across different customers' sites.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
pz_msgr_vid |
The customer's site (first party, set by the Pazau messenger) | Anonymous visitor ID so a returning visitor can see their conversation history | 12 months by default; configurable by the customer from session-only to 24 months | Strictly necessary |
pz_msgr_sess |
The customer's site (session storage) | Current conversation and unsent message draft | Session | Strictly necessary |
pz_msgr_auth |
The customer's site (first party) | Holds the signed identity token when the customer verifies signed-in users | Up to 24 hours | Strictly necessary |
Customers can switch the messenger to cookieless mode, in which it keeps state only in memory for the current page.
How to control cookies
- Cookie settings: use Cookie settings in the footer of any page on our Sites.
- Global Privacy Control: turn on GPC in a supporting browser or extension.
- Your browser: most browsers let you block or delete cookies. Blocking strictly necessary cookies will stop sign-in and some forms from working.
- Provider opt-outs: Google offers the Google Analytics opt-out browser add-on, and LinkedIn, Google, and Microsoft offer ad settings in your account with each of them. Industry opt-outs are available at optout.aboutads.info (US) and youronlinechoices.eu (EU).
Changes and contact
We update this policy when the cookies we use change. Questions? Email privacy@pazau.com, or contact our Data Protection Officer, Aoife Brennan, at dpo@pazau.com.