The short version: most of what we set is strictly necessary — it keeps you logged in and protects your session. Anything optional is off until you allow it, where the law requires consent. Blocking the necessary cookies will stop the platform from working.
1. What cookies are
A cookie is a small text file a website stores on your device so it can recognise your browser on the next request. Session cookies are erased when you close the browser; persistent cookies remain until they expire or you delete them. First-party cookies are set by pomanager.net; third-party cookies are set by another domain whose service we use.
This policy also covers similar technologies such as local storage, session storage, and pixels. It supplements our Privacy Policy, which explains how we handle personal information generally.
2. Why we use them
- To sign you in and keep you signed in as you move between pages.
- To protect your session against cross-site request forgery and other attacks.
- To remember choices such as your company, language, and interface preferences.
- To detect and block automated abuse and denial-of-service traffic.
- To understand, in aggregate, which features are used so we can improve them.
We do not use advertising cookies, we do not run third-party ad networks, and we do not sell or share cookie data for cross-context behavioural advertising.
3. Strictly necessary cookies
These are required for the platform to function and are set on the basis of our legitimate interest in delivering a service you asked for. They cannot be switched off through a consent banner. If you block them, you will not be able to log in.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
PHPSESSID | pomanager.net | Identifies your server session so you stay logged in and your workspace context is preserved across pages. | Session |
remember_token | pomanager.net | Keeps you signed in between visits if you chose "remember me". Stored hashed and rotated on each use; deleted when you log out. | Up to 30 days |
app_return | pomanager.net | Returns you to the right place after login when you use the installed app. | Session |
__cf_bm | Cloudflare | Distinguishes humans from bots so we can block automated abuse. | 30 minutes |
cf_clearance | Cloudflare | Records that a security challenge was passed, so you are not challenged repeatedly. | Up to 1 year |
_cfuvid | Cloudflare | Applies rate limits per visitor without identifying you. | Session |
A cross-site request forgery token is also held in your server session. It is not a separate cookie, but it depends on the session cookie above.
4. Functional cookies
These remember preferences and improve convenience. They are not required, but disabling them means re-setting choices each visit.
| Purpose | Set by | Duration |
|---|---|---|
| Interface preferences — sidebar state, table density, theme, dismissed notices | pomanager.net | Up to 1 year |
| Language, region, and time zone display preference | pomanager.net | Up to 1 year |
| Chat window state and unread indicators | pomanager.net | Session to 30 days |
| Record of your cookie consent choices | pomanager.net | Up to 12 months |
5. Analytics cookies
Where enabled, these help us count visits, see which features are used, and find errors. We configure analytics to minimise data collection — IP addresses are truncated or anonymised where the tool supports it, and we do not use analytics data to identify individuals or to advertise to you.
In regions where consent is required, analytics cookies are not set until you agree, and you can withdraw agreement at any time. The aggregate reporting we rely on most is derived from our own server logs, which do not require cookies.
6. Third-party cookies
Some cookies are set by providers we use to run the platform:
- Cloudflare — security, bot mitigation, and content delivery. See Cloudflare's cookie documentation for detail.
- Paddle, PayPal, PayMongo — when you go through checkout or a payment page, the payment provider may set cookies for fraud prevention and to complete the transaction. Those cookies are governed by that provider's own policy.
- Embedded content — pages that embed a third-party video, map, or widget may allow that provider to set cookies once the content loads.
We do not control third-party cookies. Review the relevant provider's privacy and cookie policies for their practices.
7. Other similar technologies
- Local and session storage: the app stores interface state, cached lists, and offline data for the installed app version in your browser's storage. Clearing site data removes it.
- Service worker and cache: the installed app version caches assets so it loads quickly and works with an unstable connection. Uninstalling the app or clearing site data removes the cache.
- Email pixels: our transactional and product emails may contain a small image that tells us whether the message was opened and whether links were clicked, so we can measure deliverability. Turn off image loading in your email client to block it.
- Server logs: we record IP address, request, and timestamp for security and diagnostics. These are not cookies and cannot be refused, but they are subject to the retention limits in our Privacy Policy.
8. Your choices and consent
Where the law requires it — including the EEA, the UK, and other regions with equivalent rules — we ask for consent before setting non-essential cookies, and we do not treat continued browsing as consent. You can:
- accept or decline categories when you first visit, and change your mind later through the cookie settings link in the site footer;
- withdraw consent at any time, with no effect on cookies already read before withdrawal;
- use your browser controls, described below, regardless of what you told our banner.
Declining optional cookies does not restrict your access to the platform. Blocking strictly necessary cookies will prevent login and core features from working.
9. Managing cookies in your browser
Every major browser lets you view, delete, and block cookies, and set exceptions per site. The relevant settings are usually under Privacy and security:
- Chrome: Settings › Privacy and security › Third-party cookies
- Safari: Settings › Privacy
- Firefox: Settings › Privacy & Security › Cookies and Site Data
- Edge: Settings › Cookies and site permissions
- Mobile: in your browser app's settings, or in your device's app settings
Deleting cookies signs you out and clears your saved preferences. Because consent choices are themselves stored in a cookie, clearing them means you will be asked again.
10. Do Not Track and Global Privacy Control
There is no common industry standard for how sites should respond to browser Do Not Track signals, so we do not currently respond to them. We do honour Global Privacy Control signals as an opt-out where applicable law requires it — although, as noted above, we do not sell personal information or share it for cross-context behavioural advertising in any case.
11. Regional notes
- EEA and UK: non-essential cookies are set only with your prior consent under the ePrivacy rules and the GDPR / UK GDPR. Withdrawing consent is as easy as giving it.
- United States: we do not sell or share personal information collected through cookies. California residents retain the rights described in our Privacy Policy.
- Philippines: cookie data that identifies you is personal information under the Data Privacy Act of 2012 and is handled under our Privacy Policy.
- Elsewhere: we apply the standard above as our global baseline, and honour any stronger local requirement that applies to you.
12. Changes to this policy
We will update this page when our use of cookies changes, with a new "Last updated" date. Where a change requires fresh consent, we will ask for it before the new cookie is set.
13. Contact us
Pomanager
Metro Manila, Philippines
- Privacy and cookies: privacy@pomanager.net
- Data Protection Officer: dpo@pomanager.net
- General support: support@pomanager.net
See also the Privacy Policy and the Terms of Service.