Legal
Cookie Policy
Last updated: October 7, 2026
1. What cookies are
Cookies are small text files that a website stores in your browser to remember information between visits or during a session — for example, that you have already logged in.
2. The cookies Pokit uses
Pokit uses three first-party cookies. Two are strictly necessary to log in; the third only remembers a preference you set:
| Cookie | Purpose | Duration | Attributes |
|---|---|---|---|
__Secure-pokit.session_token | Keeping you logged in to the admin dashboard and securely identifying your requests. It is also what lets you authorize an app to connect to your business. | 7 days, renewed while you use the dashboard; deleted when you log out | httpOnly, Secure, SameSite=Lax |
__Secure-pokit.two_factor | Only if your account has two-step verification: remembering, between the password and the code, that the first step was completed. It does not log you in by itself. | 5 minutes; deleted once you enter the code | httpOnly, Secure, SameSite=Lax |
PARAGLIDE_LOCALE | Remembering the language you chose (Spanish or English). It is only stored if you change the language yourself. | 400 days | None special: the page itself reads it. It holds no personal data |
Because they are httpOnly, the session and two-step
verification cookies cannot be read from JavaScript, which reduces the
risk of session theft. They are strictly necessary technical cookies:
without them you cannot log in, so they do not require consent and cannot
be selectively disabled while you use the dashboard. The language cookie
is a preference you set yourself; if you delete it, Pokit goes back to
your browser's language.
The __Secure- prefix is added by the browser-enforced rule
that these cookies only travel over HTTPS.
3. What Pokit does not do
- We do not use third-party cookies. No third party sets cookies through Pokit.
- We do not use advertising or tracking cookies. We do not track your browsing on other sites or build advertising profiles.
- We do not use cookie-based analytics tools. The site's public pages can be visited without any cookie being stored, unless you change the language.
4. How to manage cookies
You can delete or block cookies from your browser's settings (Chrome,
Safari, Firefox and Edge allow this in their privacy settings). Keep in
mind that if you block the __Secure-pokit.session_token cookie
you will not be able to log in to the dashboard; browsing the site's public pages
will not be affected.
5. Changes to this policy
If we add more cookies in the future, we will update this policy before they take effect, stating the new date of last update and, where the law requires it, asking for your consent.
6. Contact
Questions about this policy: hola@pokit.mx. See also our Privacy Notice.