Cookies
PageSoar uses only the cookies it needs to work. There are no advertising, analytics or tracking cookies, so there is nothing to accept or refuse.
Last updated 16 October 2026.
Cookies PageSoar sets
pl_session
- What it is for
- Keeps you signed in. Ends when the browser closes, or after the period you chose with “Keep me signed in”.
- Set by
- PageSoar
pl_pre
- What it is for
- Protects the sign-in, contact and sign-up forms against forged submissions. One hour.
- Set by
- PageSoar
pl_mfa
- What it is for
- Remembers that the password step is done while you enter a two-step sign-in code. Five minutes.
- Set by
- PageSoar
pl_wa
- What it is for
- Holds a passkey sign-in between its two steps, so the answer is checked against the challenge this browser was given. Five minutes.
- Set by
- PageSoar
pl_sso_bind
- What it is for
- Ties a company single sign-on to the browser that started it, so a sign-in started elsewhere cannot finish in yours. Ten minutes.
- Set by
- PageSoar
Browser storage
Your browser also keeps a few preferences for PageSoar on your device, such as light or dark appearance and the filters you last used on a list. They never leave your browser as cookies, and clearing site data removes them.
On a customer’s website
A PageSoar customer can add PageSoar’s heat map script to its own website. That script sets no cookie. It keeps, in that browser tab’s session storage only, the last pages of the same website the tab showed and, where the website counts only some visits, whether the tab is counted. The tab forgets both when it is closed, and neither identifies the visitor. What it sends is on the Privacy Policy.
At checkout
The checkout page loads Paddle’s payment form, which can set its own cookies to take the payment and prevent fraud. Paddle’s privacy policy describes them. No other page loads Paddle.
Questions
Changes
- 16 October 2026: Says what the heat map script keeps in a browser tab's session storage, and that it still sets no cookie.
- 15 October 2026: Says that the heat map script on a customer's website sets no cookie.
- 8 October 2026: Adds pl_wa, which holds a passkey sign-in for five minutes between its two steps.
- 25 September 2026: First published.