Cookie Policy
Last updated: March 2026
This policy describes the cookies and similar technologies used on getpressmark.com and app.getpressmark.com.
The short version: We use four cookies, all strictly necessary for authentication and payment security. We don’t use cookies for tracking, advertising, or analytics. No consent banner is needed.
What Cookies We Use
All cookies currently used by Pressmark are strictly necessary for the Service to function. They cannot be disabled without breaking core features.
| Cookie | Set By | Purpose | Duration | Classification |
|---|---|---|---|---|
__session | Clerk | Short-lived JWT for backend authentication. Created on login, refreshed automatically. | ~60 seconds | Strictly necessary |
__client | Clerk (FAPI subdomain) | Primary authentication token. Maintains your logged-in state across sessions. | Session-based | Strictly necessary |
__stripe_mid | Stripe | Device identifier for fraud prevention. Helps Stripe detect and prevent fraudulent payment activity. | 1 year | Strictly necessary |
__stripe_sid | Stripe | Session identifier for payment processing. Active only during checkout interactions. | 30 minutes | Strictly necessary |
These cookies are set by our authentication provider (Clerk) and payment provider (Stripe), not by Pressmark directly. They are essential for you to log in and make payments securely.
What We Don’t Use
- Analytics cookies: We do not set analytics cookies. Our marketing site uses Plausible Analytics, which operates entirely without cookies and does not collect personal data.
- Advertising or targeting cookies: We do not set advertising cookies, retargeting pixels, or any form of cross-site tracking.
- Social media cookies: We do not embed social media widgets that set tracking cookies.
- Third-party tracking: Vercel, our hosting provider, does not inject tracking cookies into our application.
Do We Need a Consent Banner?
No. Under both EU ePrivacy Directive and GDPR, strictly necessary cookies are exempt from the consent requirement. Because every cookie we use is strictly necessary for authentication or payment security, no consent banner or opt-in mechanism is required.
If we add non-essential cookies in the future (for example, analytics that require cookies), we will update this policy and implement appropriate consent mechanisms before activating them.
Global Privacy Control
We detect and honor Global Privacy Control (GPC) signals transmitted by your browser. When we receive a GPC signal (the Sec-GPC: 1 HTTP header), we treat it as a valid request to opt out of the sale or sharing of personal information.
Because Pressmark does not sell or share personal information, honoring GPC does not change our data processing. However, we recognize and respect the signal as required by applicable law in California, Colorado, Connecticut, Delaware, and other jurisdictions.
Changes to This Policy
If we add new cookies or tracking technologies, we will update this policy before they are deployed. Material changes will be reflected in the “Last updated” date above. If we introduce cookies that require consent, we will implement a consent management mechanism before activating them.
Questions
For questions about our cookie practices, contact privacy@getpressmark.com.