Legal
Cookies & browser storage
Last updated 2026-10-15
Pathista stores what it needs to sign you in, protect its forms and remember how you like the screen; these are strictly necessary for a service you asked for (EU ePrivacy Directive art. 5(3); in Poland art. 399 of the Electronic Communications Law). There are no advertising cookies. The one optional exception is Microsoft Clarity, whose cookies are set only if you press Accept in the banner.
Cookies
All are first-party: Pathista's own cookies are set by Pathista's address, and the two affinity cookies by our hosting front end (Microsoft Azure App Service) on that same address. The site is served only over HTTPS (a plain HTTP request is redirected, and browsers are told to use HTTPS only), so these cookies travel over HTTPS. None is readable by scripts.
| Name | What it does | How long |
|---|---|---|
.AspNetCore.Identity.Application | Keeps you signed in. | Until you close the browser; 14 days if you tick “Remember me”, renewed while you use Pathista. |
Identity.TwoFactorUserId | Carries a sign-in between the password and the two-factor step. | A few minutes, only while signing in with two-factor authentication. |
Identity.TwoFactorRememberMe | Skips the two-factor step on a device you chose to remember. | 14 days; set only if you ask for it. |
.AspNetCore.Antiforgery.* | Protects forms (sign-in, account settings, allowing an app) against cross-site request forgery. | Until you close the browser. |
Identity.StatusMessage | Carries a one-off message (“The application was disconnected”) to the next page. | 5 seconds. |
ARRAffinity | Set automatically by the hosting service (Azure App Service) to keep a visitor on the same server instance. It holds no personal data. | Until you close the browser. |
ARRAffinitySameSite | Set automatically by the hosting service (Azure App Service) to keep a visitor on the same server instance; the variant browsers also send with cross-site requests. It holds no personal data. | Until you close the browser. |
Browser storage
Two display preferences and your answer to the cookie banner are kept in your browser's local storage. They never leave your device.
| Key | What it does | How long |
|---|---|---|
pathista-theme | Light or dark theme, if you chose one instead of following your system. | Until you change it or clear site data. |
pathista.layout.* | The sizes of resizable panels (e.g. graph and log on a run page). | Until you clear site data. |
pathista.cookie-choice | Remembers whether you accepted or rejected Clarity, so we do not ask again. It only records your answer and never leaves your device. | 6 months, or until you change it or clear site data. |
Microsoft Clarity (only if you accept)
On Pathista's public pages, and only while you are signed out, a banner asks whether Microsoft Clarity may help us see how visitors use the page.
Until you press Accept nothing is loaded from Microsoft and no cookie is set. It is never used when you are signed in, in an assistant's sign-in or in the app.
What you type is never captured. If you press Accept, Clarity sets: _clck (first-party; a random user ID; up to 1 year),
_clsk (first-party; joins page views into one visit; 1 day), and Microsoft's CLID, ANONCHK, MR,
MUID, SM (third-party; identify the browser for Clarity and Microsoft sites; up to 1 year, ANONCHK 10 minutes,
SM for the session). Cookie settings in the page footer reopens your choice; withdrawing deletes these cookies and stops it.
The payment window
Only if you choose to buy Premium: the payment window opens on a page of Pathista (/billing/checkout), loads Paddle's script and shows Paddle's checkout inside it. That window belongs
to Paddle, which is the seller and sets and reads its own cookies and storage in it, under its cookie policy; Pathista has no access to them.
No page of Pathista other than that one loads anything from Paddle, and you can use the free plan without ever opening it.
Your control
You can delete cookies and site data in your browser's settings at any time, or block them for Pathista. Blocking the cookies above means you cannot sign in; clearing storage only resets the theme and panel sizes.
More about how we handle personal data is in the privacy policy.