Cookie Policy
Last updated 26 October 2026. This policy explains how PixQR uses cookies and similar technologies such as local storage, session storage, pixels or device identifiers.
1. What cookies are
Cookies are small files or identifiers stored on a device by a website or application. Similar technologies can store or access information on a device to provide login, security, analytics, preferences or marketing functions.
2. Essential cookies
Essential cookies are required for login sessions, account security, fraud prevention, load balancing, form protection and dashboard operation. These cannot be disabled through PixQR because the service cannot work securely without them.
3. Preference cookies
Preference cookies may remember interface choices such as cookie settings, design preferences or dashboard options. Where legally required, these are only used after you choose the relevant setting.
4. Analytics cookies
Analytics cookies help us understand product usage, page performance and feature reliability. Where consent is required, analytics cookies should stay disabled unless you opt in. Account-level product analytics preferences are available in Account Settings.
5. Marketing cookies
PixQR should not use marketing cookies unless they are clearly disclosed and you have given any required consent. Marketing communications can be controlled through privacy preferences or unsubscribe mechanisms where provided.
6. Third-party cookies
Payment providers, embedded content, analytics providers or support tools may set their own cookies when their features are used. Their privacy and cookie notices apply to their own technologies.
7. Cookie choices
You can manage optional choices through Cookie Settings and account GDPR preferences. You can also control cookies in your browser, but blocking essential cookies may prevent login or dashboard features from working.
8. Current implementation
The current local build uses essential PHP session cookies for authentication and security. Optional analytics/marketing cookies should remain disabled until the consent system and provider configuration are fully connected.