Cookie Notice

This Cookie Notice explains the cookies and similar browser storage Penny Pilot ("Penny Pilot", "the App", "we", "us") actually uses, why, and how you can change your choice at any time. It only describes real, current behavior — nothing here is aspirational or hypothetical.

1. What "cookies" means here

A cookie is a small piece of data a website asks your browser to store and send back on later requests. Penny Pilot also uses a small amount of browser localStorage for the same kind of purpose (remembering a preference on this device) — this notice covers both, since the practical effect for you is the same: something is remembered on this device/browser until it expires or you clear it.

2. Essential cookies and storage

These are required for Penny Pilot to function and cannot be turned off:

• access_token and refresh_token — signed, HTTP-only session cookies set by the Penny Pilot backend when you sign in. They keep you authenticated and are not readable by page scripts. access_token lasts up to 1 hour; refresh_token lasts up to 7 days (both expire sooner if you sign out or your session times out from inactivity).
• pp_consent — a first-party cookie recording the cookie preference you make on this page or the notice/preference center, so we don't ask again every visit. Kept for up to 12 months, or until you clear your browser storage.
• Storage-mode and app-state localStorage — remembers whether you've chosen Google Drive or This Device Only storage, your passkey/biometric sign-in preference, and similar application state needed for the App to work correctly across page loads. In This Device Only mode, this is also where your financial data itself is stored, entirely on this device — see the note below.
• Progressive Web App (service worker) caching — if you install Penny Pilot as an app or use it offline, a service worker caches app files and a small amount of reference data (e.g. your category list) so the App still loads and works with a poor or offline connection. This is standard PWA application caching, not analytics or tracking, and holds no advertising identifiers.

3. Functional (optional)

Penny Pilot remembers two small, non-essential preferences if you allow it in the Privacy Preference Center:

• Your light/dark theme choice, so it doesn't reset to the system default every visit.
• A remembered sign-in email, if you check "Remember me" on the login page.

If you don't allow this category, Penny Pilot still works fully — these two details simply won't be remembered the next time you visit.

4. Performance/analytics and marketing/advertising

Penny Pilot does not currently use any analytics, performance-tracking, marketing, or advertising cookies, pixels, or third-party trackers. It does not sell your personal or financial data. If this ever changes, this notice and the Privacy Preference Center will be updated to describe the real purpose and provider before anything is activated — no new tracking category will appear here that isn't genuinely in use.

5. A note on This Device Only mode

If you use This Device Only storage, your transactions, budgets, and other financial records are kept only in this browser's local storage, not sent to Penny Pilot's servers. This is application data storage, not a tracking mechanism — it exists solely so the App can display your own data back to you, and clearing your browser's site data for Penny Pilot will permanently delete it (see the Privacy Policy and Terms of Service for details).

6. Changing your choice

You can open the Privacy Preference Center at any time from the Cookie Preferences link in the footer of the landing page, or on this page. Changing your choice takes effect immediately and does not require signing out, and never affects your ability to sign in, use two-factor authentication or passkeys, connect or use Google Drive, use This Device Only mode, or manage your financial data.

7. Contact

Questions about this Cookie Notice or how Penny Pilot handles cookies and storage: superadminpennypilot@gmail.com. See also the Privacy Policy for how your account and financial data are handled more broadly.