Cookie Policy
This Cookie Policy explains the cookies and similar technologies Palate Palace uses, what each one does, how long it lasts, and the choices you have. It complements our Privacy Policy.
Last updated: August 27, 2026
1. What Are Cookies?
Cookies are small text files a website stores on your device to make it work, remember your preferences, and understand how it is used. Some technologies we use (such as your saved consent choices) are stored in your browser’s local storage rather than as cookies, but serve similar purposes and are covered by this policy.
2. How We Categorise Cookies
We group cookies into four categories that match the controls in our consent manager: Essential (always on), Preferences, Analytics, and Advertising. Everything except Essential is off by default and is only enabled after you grant consent. You can change or withdraw your choices at any time using the “Privacy choices” link in the footer.
3. Essential Cookies
Required for the Service to function — for secure sign-in and security. These cannot be turned off.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| next-auth.session-token (and __Secure- variant) | Keeps you securely signed in across pages. Set only when you log in. | Session / up to 30 days | First-party, essential |
| next-auth.csrf-token | Security token that protects sign-in and form submissions against cross-site request forgery. | Session | First-party, essential |
| next-auth.callback-url | Remembers where to return you after signing in. | Session | First-party, essential |
4. Preferences
We remember choices such as your theme and layout so the experience feels personal. Your cookie-consent choices themselves are stored in your browser’s local storage (key pp:consent:v1) so we can honour them on future visits without re-prompting.
5. Analytics (Consent-Gated, First-Party)
With your consent, we measure how the Service is used with our ownfirst-party analytics — no third-party analytics scripts. These cookies are anonymous and contain no name, email, or IP address. We store the page path (without query strings), coarse device/browser type, a traffic-source category, the referring site’s hostname, and a country derived only from our hosting network signal. Raw analytics events are kept for up to 14 months and then automatically deleted.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| pp_aid | A random, anonymous device identifier used to count unique visitors. Contains no name, email, or IP address. | 1 year | First-party, analytics (consent-gated) |
| pp_sid | A short-lived, random session identifier used to group page views into a single visit. | 30 minutes (rolling) | First-party, analytics (consent-gated) |
6. Advertising (Consent-Gated, Third-Party)
On public pages we may show advertising. When you consent, Google and its partners may set cookies to measure and personalise ads. You can opt out of personalised advertising via Google Ads Settings and aboutads.info/choices.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| Google AdSense / advertising cookies | When advertising is enabled and you consent, Google and its partners may set cookies to measure and personalise ads shown on public pages. | Varies (set by Google) | Third-party, advertising (consent-gated) |
7. Managing Your Choices
- Use the “Privacy choices” link in the footer to review, change, or withdraw consent at any time.
- Control or delete cookies through your browser settings; blocking some cookies may affect how the Service works.
- In regions where a certified consent banner is required, that banner manages your choices and Consent Mode signals.
8. Changes to This Policy
We may update this Cookie Policy from time to time. When we make material changes, we will update the “Last updated” date above. See our Privacy Policy for how we handle personal information more broadly.
9. Contact Us
Questions about this Cookie Policy? Contact us at [email protected].