Pixely

Legal — Cookies

Cookie policy

Six cookies, all strictly necessary, all set by this website, and only when you sign in. No analytics, no advertising, nothing that follows you.

Last updated 11 October 2026

Contents · 6 sections

01

What cookies are

A cookie is a small file a website asks your browser to keep, and to send back on later visits. Some are needed for a website to work at all; others are used to measure or follow what people do. This website uses only the first kind.

02

The cookies we use

This is the complete list. Every one is set by this website itself (first-party), every one is strictly necessary, and none is set unless you start to sign in.

pixely_session

Purpose
Keeps you signed in. It holds the details your sign-in provider shared, signed so they cannot be altered, and is HttpOnly, so scripts on the page cannot read it.
Lifetime
7 days, or until you sign out.
Set
Only after you sign in.
Category
Strictly necessary · first-party

oauth_state_google /oauth_state_apple

Purpose
Protects sign-in against cross-site request forgery: it proves that the answer coming back from Google or Apple belongs to the sign-in you started.
Lifetime
10 minutes, and deleted as soon as it has been used.
Set
When you start signing in.
Category
Strictly necessary · first-party

oauth_nonce_google /oauth_nonce_apple

Purpose
Protects sign-in against replay: a single-use value that stops a captured sign-in from being used twice.
Lifetime
10 minutes, and deleted as soon as it has been used.
Set
When you start signing in.
Category
Strictly necessary · first-party

oauth_pkce_google

Purpose
Holds the PKCE verifier, a one-time secret that ties the sign-in code Google returns to this browser, so an intercepted code is useless.
Lifetime
10 minutes, and deleted as soon as it has been used.
Set
When you start signing in with Google.
Category
Strictly necessary · first-party

03

What we do not use

  • No analytics, advertising or tracking cookies.
  • No third-party cookies.
  • No localStorage or sessionStorage.
  • No embedded third-party scripts, and no requests to Google Fonts: our fonts are served from our own website.

When you choose to sign in, you briefly visit Google’s or Apple’s own sign-in page. Those sites set their own cookies, under their own policies, which are described in our privacy notice.

04

Why there is no cookie banner

The law asks for your consent before a website stores anything on your device, except what is strictly necessary to provide a service you have asked for. In the UK that exemption is in the Privacy and Electronic Communications Regulations (PECR); in Algeria, Law 18-07 does not require consent for processing that is necessary to provide the service you request. The EU rules work the same way.

Every cookie above falls within that exemption, so there is nothing to ask, and we do not show a banner asking anyway.

If we ever want to add a cookie that is not strictly necessary, we will ask for your consent before setting it, and update this policy first.

05

Controlling cookies

Your browser lets you see, delete and block cookies, for all websites or for this one. The settings are usually under Privacy or Security in its preferences, and its help pages explain them.

  • Everything on the website except signing in works without cookies.
  • If you block cookies for this website, you will not be able to sign in.
  • Deleting pixely_session signs you out.

06

Changes and contact

When this policy changes, the new version is published here with a new date at the top, and material changes are flagged on the website.

Questions about cookies: contact@pixely.dz. The privacy notice explains everything else we do with personal data, and the terms of use govern the website.