Cookie Policy

Cookies are small text files that a website stores on your device so it can remember things between page loads — who you’re signed in as, which theme you picked, which organization you’re currently viewing. ProMan uses cookies only where they’re necessary to make the product work or to remember your preferences; we don’t use them for advertising or third-party tracking.

ProMan sets three kinds of cookies.

• Essential (session / authentication). Set when you log in and used to keep you logged in across page loads. Without these, the app doesn’t work. Name pattern: next-auth.session-token (or __Secure-next-auth.session-token in production).
• Functional. Remember your current theme (dark/light), your active organization if you belong to more than one, and similar UI preferences. These make the product nicer; you can clear them without breaking anything.
• Analytics. We use Vercel Analytics — a privacy-respecting, first-party analytics product that does not use cross-site tracking cookies. No third-party advertising pixels, no Google Analytics, no Segment, no Mixpanel.

The authentication session cookie is issued when you log in and expires after 30 days of inactivity, or sooner if you click “Sign out”. If you check “Keep me signed in” on the login form, the cookie is refreshed on every active request so the 30-day clock resets. Otherwise, closing the browser ends the session.

Cookies set by ProMan are marked Secure and HttpOnly in production; the session cookie also uses SameSite=Lax.

All modern browsers let you view, block, or delete cookies on a per-site basis. In Chrome, Firefox, Safari, and Edge you’ll find the controls under Settings → Privacy. Blocking essential cookies will prevent you from logging into ProMan, but you can freely clear functional cookies and use the product.

Because we don’t use third-party tracking cookies, ProMan doesn’t show a cookie-consent banner for tracking purposes — there’s nothing to opt out of that we can’t already control through the cookie types above.

If we add, remove, or change how we use cookies, we’ll update this page and the “Last updated” date at the top. Material changes (e.g. adding an analytics provider) will be accompanied by an in-app banner with at least 30 days’ notice.