The short version
Priveloq Chat sets only strictly necessary cookies. There are no analytics cookies, no advertising cookies, no marketing pixels and no third-party trackers anywhere on this website or in the product.
That is why you were not shown a consent banner. Under the privacy laws we are aware of, consent is required before non-essential technologies are placed on your device. We do not use any, so there is nothing to ask you about — and showing a banner that implied otherwise would be misleading rather than careful.
Reading these public marketing pages does not set a cookie for you at all. The cookies below appear when you sign in, submit a form, or join a guest room.
The cookies
| Cookie | Purpose | Category | Lifetime |
|---|---|---|---|
__Host-pc_auth |
Keeps you signed in. Bound to a session record that you or an administrator can revoke. | Strictly necessary | The configured session lifetime |
__Host-pc_rt |
Obtains the short-lived tokens the realtime connection needs, so that messages and calls arrive without you signing in again. | Strictly necessary | The configured refresh token lifetime |
__Host-pc_guest |
Held only by somebody who redeemed a temporary guest invitation. Valid for that one room and nothing else. | Strictly necessary | Until the guest session expires or the room ends |
| Antiforgery token | Stops another website submitting a form as you. Set by the web framework when a page contains a form. | Strictly necessary | The browser session |
All of them are marked so that a browser will not send them over an
unencrypted connection and will not expose them to scripts. The
__Host- prefix is a browser-enforced rule that the
cookie is bound to this exact host and path.
Local storage
One preference is kept in your browser's local storage rather than in a cookie, which means it is never sent to the server:
-
pc.theme— whether you chose the light or dark appearance, so the page does not flash the wrong one before it loads.
The product also uses browser storage to make the application work offline-tolerantly and to hold things like unsent drafts. None of it is used to track you, and clearing your site data removes all of it.
Third-party content
These public pages load nothing from another company's servers. The stylesheets, the script, the icons and the images are all served from this installation, and there are no embedded fonts, maps, videos or widgets fetched from elsewhere.
Inside the product, if your installation has calling enabled, a call connects your browser to the configured conference service in order to carry audio and video. That is a live media connection needed to place the call, not tracking. The subprocessor list names the provider this installation uses.
Controlling cookies
Every browser lets you see, block and delete cookies. Because the cookies above are strictly necessary, blocking them will stop you signing in, stop forms submitting, or stop a guest room working — there is no version of the product that functions without them.
If we ever introduce an optional, non-essential technology, we will ask for your consent before it loads, offer an equally easy way to refuse, and add it to this page.
Questions
See the Privacy Notice for how information is used more generally, or write to us through the contact page.