Cookie Policy

What this policy covers

This policy explains how Avut PIM uses cookies and other technologies that store information in, or access information from, a user’s browser or device, including local storage and session storage.

Current cookie and storage use

Avut PIM currently uses only cookies and browser storage that are strictly necessary to provide the service requested by the user, including sign-in, security, session continuity, organization routing in a multi-tenant environment, user-selected preferences such as language or theme, temporary application state needed to complete requested actions, and limited browser-side state for supported login, integration, or workflow flows.

The service does not currently use analytics, advertising, or marketing cookies or similar technologies.

Authentication and security technologies

Avut PIM uses Clerk for authentication and session management. Clerk sets cookies or similar storage that are required for sign-in, maintaining an authenticated session, and protecting access to the service. These technologies are necessary for the service, and disabling them may prevent sign-in or continued use of authenticated areas.

Avut PIM also uses Cloudflare-related security services for abuse prevention and protected flows, including Cloudflare Turnstile where enabled. Depending on the active production configuration, Cloudflare may set strictly necessary security cookies or similar storage for bot protection, challenge handling, rate limiting, or abuse prevention. Whether these technologies are set, their names, and their duration depend on the active configuration.

Billing-related pages

Avut currently uses Stripe-hosted Checkout Sessions for subscription purchases and Stripe Customer Portal for subscription self-service. If a user is redirected to a Stripe-hosted checkout or billing page, Stripe may use its own strictly necessary cookies or similar storage on that page under Stripe’s own documentation and policies.

Cookie and storage inventory

The current inventory is generally as follows:

• Clerk authentication cookies or similar storage: used for sign-in, session continuity, and access protection;
• Cloudflare security cookies or similar storage: used for bot protection, abuse prevention, challenge handling, rate limiting, and delivery security where enabled;
• Avut local storage: used to remember user-selected preferences such as language, theme, and interface layout;
• Avut session storage: used for temporary routing, form state, workflow state, and other temporary information needed while the current browser tab or session is active.

Where third-party providers set their own cookies or similar storage, the exact names and durations may vary by configuration, browser behavior, and provider updates.

Preferences and local storage

Avut PIM may store user-selected interface preferences in browser storage, such as theme, language, and saved layout choices. Local storage is used for preferences that should remain available after the current session unless browser data is cleared. Session storage is used for temporary information needed while the current browser tab or session is active.

Clearing browser data may reset these preferences and may also interrupt sign-in, security checks, or other core parts of the service.

Consent

Avut does not currently display a consent banner for optional cookies or similar technologies because Avut PIM currently uses only storage and access that is strictly necessary to deliver authentication, security, requested preferences, and core application functionality.

If Avut later introduces analytics, marketing, or other non-essential technologies, they will not be enabled until any required consent has been obtained. Rejecting or withdrawing optional consent will be as easy as granting it.

MCP functionality does not currently introduce any identified separate non-essential browser cookies or tracking requirements.

Changes

Avut will update this policy before any analytics, marketing, or other non-essential cookies or similar technologies are introduced in production. Avut will also review this inventory when authentication, security, or billing providers or configurations change.

Related privacy information

For more information about how Avut processes personal data related to these technologies, including legal basis, recipients, transfers, and rights, please see Avut’s Privacy Policy and public provider register at https://avut.io/privacy/subprocessors

If you have questions about this Cookie Policy, contact admin@avut.io.