Cookie Policy | Pi-xcels

PI-XCELS COOKIE POLICY

Effective Date: 20 May 2025

1. INTRODUCTION

1.1. This is the Cookie Policy for Pi-xcels Pte. Ltd. and its affiliates and related companies (collectively referred to herein as "Pi-xcels", "us", "we" or "our"). In this Cookie Policy, "you" and "your" refers to any person and/or entity using and/or accessing our Services and/or Websites.

1.2. This Cookie Policy explains how we use cookies and similar technologies, what these technologies are, why we use them, and your rights to control our use of them, when you use and/or access our websites and applications (collectively, "Websites").

1.3. We use cookies that are strictly necessary for the proper operation of our Websites. With your prior consent, we also use cookies in order to understand how users use our website and measure its effectiveness (site performance), improve non-essential features of the Websites during your browsing (optimizing your browsing), show you non-personalized ads (non-personalized advertising), or personalized ads based on your browsing and profile (personalized advertising), retarget our ads on social networks (social network targeting) and on third-party sites (third-party site targeting).

1.4. If we collect personal data about you via cookies, we will use them in accordance with our Privacy Policy, which we encourage you to read for further information about our use of personal data and sharing with third parties.

2. WHAT ARE COOKIES?

2.1. Cookies are small data files that are placed on your computer or mobile device when you visit a website or access an application.

2.2. Cookies are widely used by website operators to make their websites work (or work more efficiently), for reporting and analytics purposes, or to support online advertising.

2.3. There are two different types of cookies: session cookies and persistent cookies. These cookies are used for different purposes and do not contain the same information:

2.3.1. Session cookies: Session cookies contain information that is used within your current browser session. These cookies are automatically deleted when you close your browser. Nothing is stored on your device after you leave the website.

2.3.2. Persistent cookies: Persistent cookies are used to retain information between visits. When you return to a website, this data allows it to recognize you and act accordingly. Persistent cookies have a lifespan defined by the website and can vary from a few minutes to several months.

2.4. In addition, cookies can be "first party" or "third party" cookies. First party cookies are those that are generated by the website or application that you are visiting. Third party cookies are those that are generated by a domain, a website or an application other than the one you are visiting.

3. INFORMATION ABOUT OUR USE OF COOKIES

Strictly Necessary Cookies

3.2. These are essential cookies that are required for the operation of our Websites. They include, for example, cookies that enable you to log in to secure areas of the site or to access your account. They also enable the display of items that are appropriate for the options and route that you have selected. These cookies make it possible to remember the Website’s essential settings that you have chosen, such as language or cookies preferences, in order to provide you with the browsing experience you would normally expect.

3.3. The use of strictly necessary cookies does not require your consent, and these cookies cannot be disabled.

3.4. We use the following strictly necessary cookies:

Cookie name Purpose Third party partner(s) deploying cookies/tags with whom we share information and their privacy policy Cookie duration
auth_token To maintain a secure session in the Piperks app. Pi-xcels sets it after you log in or when you view a receipt without log in. N/A 15 minutes
refresh_token To maintain a secure session in the Piperks app. Pi-xcels sets it after you log in or when you view a receipt without log in. N/A 30 days
auth To indicate whether a user is likely to be authenticated before receiving the backend response. N/A No automatic expiry - persists until cleared by app or user
basecountry To store a user's base region. Used for region based functions such as displaying region specific receipt features. N/A No automatic expiry - persists until cleared by app or user
rt_ To store the receipt UID used by the application, necessary for receipt functionality. N/A Persists until session ends
fbm_[App_ID] Facebook’s login state cookie, stores app-specific session information. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 1 year
fbsr_[App_ID] Facebook’s signed request cookie for user verification. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 1 hour
xs Contains session ID and a secret. Used to authenticate user sessions. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 1 year
datr Identifies the browser to help with security and site integrity. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 1 year
sb Browser identifier for improving security and site integrity. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 1 year
g_state Stores state information for Google sign-in sessions. Google, https://policies.google.com/privacy 180 days
__Host-1PLSID To maintain login state securely across Google services. Google, https://policies.google.com/privacy 400 days
__Host-3PLSID Supports third party session state securely for authentication. Google, https://policies.google.com/privacy 400 days
__Host-GAPS Helps manage Google sign-in sessions across services. Google, https://policies.google.com/privacy 400 days
SAPISID For managing and securing authenticated sessions across Google services. Google, https://policies.google.com/privacy 400 days
HSID To authenticate users, prevent fraudulent use of login credentials and protect user data from unauthorized access. Google, https://policies.google.com/privacy 400 days
SID Digitally signed and encrypted ID to identify users uniquely and securely. Google, https://policies.google.com/privacy 400 days
LSID Session management for secure access to Google accounts and services. Google, https://policies.google.com/privacy 400 days
SEARCH_SAMESITE Helps prevent Cross-Site Request Forgery for Google services. Google, https://policies.google.com/privacy 6 months
SIDCC Security measure related to cookie transmission/consent. Google, https://policies.google.com/privacy 1 year
AEC Ensures requests are made by real users and not malicious sites. Google, https://policies.google.com/privacy 6 months
CONSENT Stores user consent choices and region information for Google’s services. Google, https://policies.google.com/privacy 2 years

Analytics Cookies

3.5. Analytics cookies are cookies used to determine how you use and interact with our Websites and whether you experience any errors. We collect this information for analytical purposes, to better understand how you use our Websites and to measure the effectiveness of our features and functionality. This allows us to improve our Websites as well as the products and services we offer.

3.6. Analytical cookies are also made to measure the audience to deliver non-personalized advertising, without profiling the users.

3.7. The use of analytical cookies requires your consent. If you do not accept these analytical cookies, we will not be able to measure the performance and audience of our Websites. It will not affect your experience or the functionality of our Websites.

3.8. We use the following analytical cookies:

Cookie name Purpose Third party partner(s) deploying cookies/tags with whom we share information and their privacy policy Cookie duration
ar_debug To debug ads and analytics implementation. Google Analytics, https://policies.google.com/privacy Persists until session ends
_ga To distinguish unique users by assigning a randomly generated number as a client identifier. Google Analytics, https://policies.google.com/privacy 400 days
ga To persist session state for Google Analytics usage. Google Analytics, https://policies.google.com/privacy 400 days
MUID To identify unique browsers for tracking across Microsoft services. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 300 days
ANON To identify anonymous users and store user preferences. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement Persists until session ends
ANONCHK Used for ad click fraud detection and session coherence for Clarity/Bing Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 15 minutes
CLID To identify the first time Clarity sees this user on any site using Clarity. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 1 year
SM For synchronizing the Microsoft user ID across domains. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement Persists until session ends
MR To indicate or perform Microsoft user ID refresh. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 7 days
_clck Persists the Clarity User ID and preferences, unique to that site. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 1 year
_clsk Connects multiple page views by a user into a single Clarity session recording. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 1 day
AMP_ To track sessions and analytics Sentry, https://sentry.io/privacy/ 1 year
sentry-sc For authentication, security & session tracking for diagnostics. Sentry, https://sentry.io/privacy/ 1 year
ar_debug To debug pixel & ad features for Facebook authenticated sessions. Facebook, https://www.facebook.com/privacy/policy/ Persists until session ends
OTZ Tracks aggregate analytics data for Google services. Google, https://policies.google.com/privacy 30 days

Preference Cookies

3.9. Preference cookies are cookies designed to improve and personalize the non-essential functionalities of our Websites, give you access to specific but non-essential features depending on your browsing on our Websites, and thus to improve your browsing experience.

3.10. The use of preference cookies requires your consent.

3.11. If you do not accept these preference cookies, the non-essential features of the website or application may not function properly.

3.12. We use the following preference cookies:

Cookie name Purpose Third party partner(s) deploying cookies/tags with whom we share information and their privacy policy Cookie duration
MR Resets/refreshes the Microsoft user ID cookie. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 7 days
NAP Set by Microsoft to store contact/account information. Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 10 minutes
c_user Contains the user ID of the currently logged in user. Used for authentication and session management. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 1 year
wd Stores the browser window dimensions to optimize rendering. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 7 days
__Secure-1PAPISID Set by Google to maintain secure login sessions for Google sign-in. While Pi-xcels does not use it for ads, it may also support personalized features within Google services. Google, https://policies.google.com/privacy 400 days
__Secure-1PSID Used by Google for secure session handling during authentication. Pi-xcels uses this strictly for login functionality, though Google may apply it for personalization. Google, https://policies.google.com/privacy 400 days
__Secure-1PSIDCC Supports secure Google account login across domains. Pi-xcels only uses this for federated login, though Google may use it for content personalization. Google, https://policies.google.com/privacy 1 year
ACCOUNT_CHOOSER Remember the selected Google accounts for login. Google, https://policies.google.com/privacy 400 days
APISID Used by Google to store user preferences and session information across services. Google, https://policies.google.com/privacy 400 days
SSID Used by Google to store user preferences and session information across services. Google, https://policies.google.com/privacy 400 days
LSOLH Supports Google account state preservation between services. Google, https://policies.google.com/privacy For the session, but depends on OAuth or SSO flows
SMSV Used in cross-site user recognition to maintain session state securely. Google, https://policies.google.com/privacy For the session, but depends on OAuth or SSO flows
__Secure-1PSIDTS Used by Google for secure sign-in process. While Pi-xcels does not use it for ads, it may be used by Google services for targeted advertising. Google, https://policies.google.com/privacy 1 year

Advertising Cookies

3.13. These cookies are used to deliver advertisements that are relevant to you and your interests, either on our Websites, on third party websites such as Google or on social platforms such as Facebook. They record your visit to our website or application, the pages you have visited, and the links you have followed. These cookies may also include certain code that help track conversions from ads, optimize ads based on collected data, build targeted audiences for future ads, and retarget ads to qualified users who have already taken certain action on the platform. These cookies are usually placed by third party partners. We use these cookies only if you have consented via the cookie banner.

3.14. If you do not accept advertising cookies, we and the relevant third parties will no longer be able to show you personalized advertising messages (i.e. advertising tailored to your browsing habits and interests) and will have fewer opportunities to tailor our marketing strategy to your preferences and online behaviour. If you do not accept advertising cookies, you will still see ads, but they will not be personalized to you.

3.15. We use the following advertising cookies:

Cookie name Purpose Third party partner(s) deploying cookies/tags with whom we share information and their privacy policy Cookie duration
SRM_B Ad serving & tracking for Bing/Microsoft Microsoft Clarity, https://www.microsoft.com/en-us/privacy/privacystatement 390 days
AMP_MKTG_ Marketing analytics & user engagement tracking Sentry, https://sentry.io/privacy/ 1 year
fr Supports secure Facebook login and session continuity. Although this cookie is also used by Facebook for ad-related and retargeting purposes across its network, Pi-xcels does not use it for such purposes. Only set by Facebook after the sign-in process is complete and the user selects to be authenticated using Facebook. Facebook, https://www.facebook.com/privacy/policy/ 90 days
__Secure-3PAPISID Set by Google to support cross-site login functionality. It may also contribute to ad personalization by Google services. Pi-xcels does not use this cookie for marketing. Google, https://policies.google.com/privacy 400 days
__Secure-3PSID Used in third party contexts to maintain secure login. Also used by Google for ad personalization. Not used for targeting by Pi-xcels. Google, https://policies.google.com/privacy 400 days
__Secure-3PSIDCC Enables secure federated login across Google domains. May be leveraged by Google for ad targeting, though Pi-xcels does not use it for such purposes. Google, https://policies.google.com/privacy 1 year
NID Remembers user preferences (like language) and used for Google advertising personalization. Google, https://policies.google.com/privacy 6 months
__Secure-3PSIDTS Used by Google for secure sign-in process. While Pi-xcels does not use it for ads, it may be used by Google services for targeted advertising. Google, https://policies.google.com/privacy 1 year

4. HOW CAN YOU CONTROL COOKIES?

4.1. When you browse our Websites, an explanatory banner on the use of cookies appears. It allows you to consent to all cookies, to refuse them all or to provide your consent to cookies purpose per purpose, by clicking on our Cookie Consent Manager. If you continue browsing without consenting, the banner will disappear after a short period of time and only strictly necessary cookies will be used.

4.2. You can manage your consent preferences at any time to accept or reject the use of various categories of cookies, which are not strictly necessary, through our Cookie Consent Manager. If you disable cookies and similar technologies, some of our Websites’ features may not work as intended.

4.3. In addition, you can block cookies by activating the setting on your browser that allows you to refuse the setting of non-essential cookies (i.e. analytical cookies, preference cookies, and marketing cookies). You can adjust your internet browser settings to disable, block, or deactivate cookies, delete your browsing history, or clear the cache. These settings may be found in the "History," "Preferences," "Settings," or "Privacy" sections of your browser. For more detailed instructions, you may consult the help section of your browser. Please note that if you use your browser settings to block all cookies, you may not be able to access all or parts of our Websites.

5. CHANGES TO OUR COOKIE POLICY

5.1. This Cookie Policy may be updated from time to time. If there is a material change to this Cookie Policy, we will keep you informed by posting a pop-up window on our Websites for a reasonable period of time before such change. We will ensure not to use cookies for purposes that you have not provided your prior consent (where required by law).

5.2. You will find the date of the last update at the top of this Cookie Policy.

5.3. The Cookie Policy can be consulted on our Websites by clicking on the Cookie Policy link.