Cookies

Strictly necessary

These make the site work and cannot be switched off. They are set whatever you choose in the banner, because without them you cannot sign in or stay signed in.

• panorama_session — your signed-in session. HttpOnly, expires with the session.
• panorama_admin — staff console session. HttpOnly, staff only.
• panorama_lang, panorama_theme — interface language and light/dark preference.
• panorama_consent — remembers this very choice, so we do not ask again. One year.
• panorama_oauth_state, panorama_signup_code, panorama_signup_attr — carry a Google sign-in safely across the redirect (CSRF state, an optional promo code, and which page you arrived from). Ten minutes, deleted right after.
• panorama_ab — which of two home-page designs you were shown, a single letter, so the page stays the same on your next visit. Thirty days. No identifier, not shared with anyone.

Analytics — only with your consent

Tells us which pages people actually use, so we spend effort on the ones that matter. Not loaded in the signed-in workspace, the admin console or on invoice payment links.

• Google Analytics 4 — first-party analytics cookies; your IP address is truncated before it reaches Google.

How consent works here

Visitors in the EEA, the United Kingdom and Switzerland are asked before any analytics or advertising cookie is set. Google’s tags run under Consent Mode v2 with storage denied by default, so nothing is stored until you accept. Refusing is one click and is exactly as prominent as accepting.

Changed your mind? Your choice is stored for a year and you can replace it at any time:

What we never do

We do not sell personal data, we do not load advertising cookies in the signed-in workspace, and we do not put invoice links or payment pages into any analytics property — an invoice share token would otherwise be transmitted as a page URL.