Cookie Policy

PCIFIC Business

Draft prepared:

This Cookie Policy explains how PCIFIC Marketplaces Limited, trading as PCIFIC ("PCIFIC", "we", "us", or "our"), uses cookies and similar technologies on https://business.pcific.ai and PCIFIC Business pages that link to this policy.

It should be read with our Privacy Policy, which explains how we process personal information more broadly. This policy covers the business website, dashboard, demonstrations and embedded tool journeys where this policy is presented. A business integrating our tools is responsible for the technologies on its own website. The separate PCIFIC consumer shop and Safeguard browser extension have their own disclosures.

Table of contents

What we mean by cookies and similar technologies

A cookie is a small text file stored on your device by a website or service. Similar technologies store information on your device or access information from it. They include local storage, which can remain between visits; session storage, which normally lasts for the browser tab's session; browser databases such as IndexedDB; and scripts that use these technologies.

First-party technologies are set by PCIFIC or on this website's behalf. Third-party technologies are provided or controlled by another organisation. The fact that information is stored only in your browser does not automatically make the storage exempt from consent requirements.

Categories we use

Essential and security technologies

These technologies support requested sign-in, account security and phone capture. Blocking them may stop those functions from working.

  • __Host-pcific_session: set by PCIFIC to keep a signed-in browser authenticated. Initially 14 days; activity can renew it, up to 28 days from the original sign-in. It ends sooner on sign-out, revocation or expiry. It is restricted to the host that sets it, sent over HTTPS and unavailable to page scripts.
  • pcific_pending_sign_in: set by PCIFIC to connect the browser to a sign-in awaiting its next verification step. Up to 10 minutes, and removed when the sign-in completes.
  • pcific_passkey: set by PCIFIC to connect a passkey request to the browser that started it. A passkey is a device-based sign-in credential. Up to five minutes, and removed on completion of the relevant flow.
  • pixel_trace_camera: set by PCIFIC when a phone opens a PixelTrace camera capture. It binds the requested capture to that phone and is restricted to that capture's camera routes. It lasts until the capture link expires, 30 minutes by default or between 5 and 120 minutes as set by the business, and is removed when the seller confirms the capture.
  • pcific-dashboard-signed-out: local storage used by PCIFIC to notify other open tabs of a sign-out. Its random value is replaced on the next sign-out or removed when site data is cleared; it is not an account password or session token.
  • pcific-analytics-consent: PCIFIC local storage recording your accepted or declined analytics choice, as explained above. It remains until replaced or cleared in the current implementation.

Functional technologies

These technologies remember selected features and preferences. Local storage normally remains until it is overwritten, removed by the feature or cleared through browser settings. Browser software may clear it earlier. Where a preference does not meet an exception, the required permission must be obtained before storage is used.

  • pcific-dashboard-shop: PCIFIC local storage remembering the shop selected in the dashboard. It is replaced when your selection changes and removed when the selection is cleared, including on sign-out.
  • pcific:motion: PCIFIC local storage remembering your animation preference. It remains until changed or cleared.
  • pcific:frame-corners: PCIFIC local storage remembering your selected dashboard frame appearance. It remains until changed or cleared.
  • pcific:dashboard-recent: PCIFIC local storage remembering recently visited dashboard pages. It is updated as you navigate and remains until replaced or cleared.
  • pcific-overview-traffic: PCIFIC local storage remembering whether the dashboard overview shows live, test or all request traffic. It remains until changed or cleared.
  • pcific-closed-incidents: PCIFIC local storage remembering which service notices you have dismissed. It remains until updated or cleared.
  • pcific:footer-return: PCIFIC session storage supporting the return link after you follow a homepage section link from another page. It is consumed by that navigation or ends with the browser session.
  • pcific-orbit-run: PCIFIC session storage remembering a running Orbit listing in an embed or template preview, so a page reload can pick it up. It is removed when the run finishes, stops, or expires, or ends with the browser session.
  • pcific-tool-demo: a PCIFIC IndexedDB browser database containing the current demo journey, including selected photos, answers, drafts, reports and certificate information. It lets you continue across tool pages and remains until cleared, replaced or reset. A server capture link expiring does not itself erase this browser copy.
  • pixel-trace: a PCIFIC IndexedDB browser database on the phone used for a PixelTrace capture. It holds the phone's signing key for that capture and photos not yet sent, so a weak connection does not lose them. Each entry is deleted when its capture is confirmed, and entries older than 2 days are removed.

Analytics and measurement technologies

With your permission, Google Analytics 4 measures page visits and usage. The Business measurement identifier is G-Z6QKTSTPBE. Google receives approved page names and route patterns, rather than actual addresses containing customer values, query strings, certificate codes or referring addresses. We also send named events, such as signing up, signing in, starting a sales enquiry, creating an API key or webhook, adding a shop or document, inviting a colleague, and trying a tool demonstration, with the tool name where relevant. We do not send form answers, account details, passwords, API keys, verification codes or tool content in these events. The script loads from www.googletagmanager.com and sends measurements to google-analytics.com. Google also processes browser and device details, online identifiers and the technical information needed to deliver analytics.

Google advertising signals and advertising personalisation are disabled. These website analytics are separate from account security records and the tool usage records required to provide and administer the service.

  • _ga: set through Google Analytics to distinguish visitors. Google's default expiry is two years and may be renewed by activity. Browser restrictions can shorten its lifetime; withdrawing analytics permission clears this site's copy.
  • _ga_<identifier>: set through Google Analytics to maintain analytics session state. Google's default expiry is two years, subject to browser restrictions and earlier deletion when you withdraw permission.

Payment and fraud-prevention technologies

The current PCIFIC Business app does not operate a Stripe checkout or store full payment card details. We do not list Stripe cookies from the separate consumer shop as active Business cookies. If a payment journey is introduced, its providers, technologies, purposes and choices must be reviewed and disclosed before use.

Map, address and location technologies

The current Business app does not use the consumer shop's Mapbox or Google Maps integrations. Our pages block location and microphone access. The PixelTrace capture page asks for camera access and, on iPhone, motion sensor access; motion readings are sent with the photos as capture evidence and are not stored as browser data. We do not describe a map or precise-location cookie as active merely because another PCIFIC product uses one.

Embedded content, fonts and delivery technologies

PCIFIC serves its own scripts, fonts, images and videos from this website; we do not use Google Fonts or video embeds. Tool and PixelTrace photos are loaded from Cloudflare R2 storage through short-lived links. An ordinary request for an asset is not by itself proof that its provider sets a cookie. Any additional storage or tracking introduced through embedded content must be assessed and disclosed before it is enabled where permission is required.

Technologies not described as active site cookies

Hosting, email, AI, web-research and device-check providers can process information when PCIFIC sends them a requested task. That server-side processing is explained in the Privacy Policy; it does not by itself make each provider a browser cookie provider on this site.

The Business app does not inherit the consumer shop's Sharetribe login cookies, basket storage, shipping technologies, newsletter integrations or browser-extension storage. Other websites reached through a link or an integration may use their own technologies under their own notices.

How to manage cookies and similar technologies

Use Analytics preferences in the site footer to accept or decline analytics or change a previous choice. You can also use browser settings to inspect and delete cookies, clear local and session storage and browser databases, block site data and manage camera permissions. Choices are normally specific to the browser and device you use.

Please note that clearing or blocking essential technologies may prevent sign-in, verification, phone capture or other requested functions from working correctly. Clearing demo storage removes saved local progress. Losing access to browser-held information may prevent you from continuing a journey.

Deleting browser data does not automatically delete your account, business records, tool records, support messages, billing records, photo fingerprints or published certificates. Those are covered by the Privacy Policy and the relevant account or support processes.

Changes to this policy

We may update this Cookie Policy to reflect changes in technologies, Business features, law, regulatory guidance or providers. We will update the date and provide additional information or request fresh permission where required. A revised policy does not itself grant permission for new tracking.

Contact us

Email: support@pcific.co.uk. Post: PCIFIC Marketplaces Limited, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.