Cookie Policy

Cookies are small text files placed on your device by a website. They are used to remember information between visits — for example, that you are signed in. Some cookies are essential for a site to function; others are used for analytics or advertising.

We use only the cookies that are strictly necessary to operate the Service. We do not use third-party advertising cookies, cross-site trackers, or retargeting pixels. We do not sell information collected via cookies.

• Authentication / session. Set when you sign in to Phihelm. Stores a session token that proves you are signed in. Cleared on logout or when the session expires.
• Refresh-token cookie. An HTTP-only, secure cookie that carries the refresh token used to obtain a new short-lived access token. Cannot be read by JavaScript.
• CSRF state. Used during OAuth flows with brokerages to protect against cross-site request forgery during the redirect.

During Stripe checkout, Stripe sets its own cookies on its hosted page to process your payment securely. Those cookies are governed by Stripe’s cookie policy and are not under our control. We do not read or share data from Stripe’s cookies.

You can block or delete cookies through your browser settings. Note that blocking the strictly-necessary cookies described above will prevent you from signing in to Phihelm.

We may update this Cookie Policy from time to time. The current version is always available at this URL with the “Last updated” date.

Questions about this Cookie Policy? Email [email protected].