Cookie policy
Cookies are small files a site stores on your device. Below are the ones we use, what each is for, and how to change your mind. Apart from the strictly necessary ones, nothing loads without your prior consent.
1. Necessary cookies (always on)
The service does not work without these: they keep you signed in, protect forms and remember basic choices. They do not require consent because they are essential to deliver the service you asked for.
| Name | Set by | What for | Lifetime |
|---|---|---|---|
laravel_session | PawAI (api.pawai.app) | Keeps you signed in | Session |
XSRF-TOKEN | PawAI (api.pawai.app) | Protects forms against CSRF attacks | Session |
pawai_session_hint | PawAI | Tells routing a session exists, so the app does not flash on load | 7 days |
NEXT_LOCALE | PawAI | Remembers your language | 1 year |
currency | PawAI | Remembers whether you see prices in € or $ | 1 year |
geo_country | PawAI | Country detected from your IP, to know whether your purchase carries a right of withdrawal | 1 year |
pawai_consent | PawAI | Stores your cookie choice so we stop asking | 6 months |
cookie-consent | PawAI (local storage) | A copy of your choice in the browser | Until you clear it |
pawai_visitor_id | PawAI (local storage) | Random browser identifier so the same free-scan visit is not counted twice | Until you clear it |
2. Audience measurement (on, you can object)
We measure which screens get used and where people get stuck with Umami, hosted on our own servers. As of July 2026 we no longer use Google Analytics.
This measurement writes no cookies and stores nothing on your device. It tells visits apart using a code computed on the fly from your IP address, your browser and a key we rotate daily, and that code cannot be used to work out who you are or to recognise you the next day. Because we neither store nor read anything on your device, it is not a cookie and we do not ask your permission for it: the lawful basis is our legitimate interest (GDPR art. 6.1.f) in knowing whether the product works.
You can object at any time (GDPR art. 21) from the cookie preferences panel by switching off "Audience measurement". If you do, we stop measuring your browsing entirely, both in Umami and in our own database. The "Reject all" button switches it off too.
If you have an account, we also store in our own database which actions you take inside the app (logging a meal, a weight, an analysis) linked to your account, so we can support you and understand real product usage. That is covered in the Privacy Policy and is deleted when you delete your account.
3. Advertising cookies (consent required)
These measure whether a campaign works and allow ads to be shown on Meta and TikTok to people with similar interests. They are third-party cookies used for cross-site tracking, which is why they sit in their own category, separate from analytics. If you decline, neither Meta nor TikTok receives anything.
| Name | Set by | What for | Lifetime |
|---|---|---|---|
_fbp | Meta Platforms, Inc. (US) | Identifies the browser to measure Facebook and Instagram campaigns | 3 months |
fr | Meta Platforms, Inc. (US) | Advertising and measurement on Meta | 3 months |
_ttp, ttwid | TikTok Technology Ltd. (US / Ireland) | Measures TikTok campaigns | Up to 13 months |
acq | PawAI | Remembers which campaign or referral code brought you here, so a purchase can be attributed | 90 days |
pawai_campaign | PawAI (session storage) | Remembers which campaign you came from during this visit, so a purchase can be attributed | Until you close the tab |
4. Changing your mind
You can accept or reject each category whenever you want, and rejecting is as easy as accepting: the banner has a reject button of the same size, at the same level as accept.
- With the Manage cookies button at the bottom of this page.
- From Profile → Privacy and data inside the app.
- From your browser settings, where you can also delete cookies already stored.
If you withdraw consent we stop loading those technologies immediately and reload the page to unload anything already in memory.
Your browser may send a "Do Not Track" signal. There is no common standard for responding to it and we do not act on it: the control is this banner and the preferences panel.
5. More information
Data collected by these cookies is handled as described in the Privacy policy, which covers recipients, international transfers and your rights. For anything else, write to [email protected]. The controller is IGNIRA TECHNOLOGIES S.L., Spanish tax ID B-23957723; full details are in the Legal notice.
Change which categories you accept right now. Your choice is stored on this device.
Last updated: 2026-08-05