Cookie Policy — Pochyaa

1. What Are Cookies?

Cookies are small text files placed on your device by a web server when you visit a website. They are widely used to ensure websites function securely, remember your authenticated session, and protect against unauthorized submission of data.

2. Our Minimal Cookie Commitment

Zero Third-Party Advertising Trackers: Pochyaa does NOT deploy third-party advertising cookies, cross-device behavioral trackers, social network tracking pixels (such as Meta Pixel or LinkedIn Insight), or data-broker scripts. We operate exclusively with first-party, strictly necessary security and session cookies.

3. Cookies Deployed by Pochyaa

Cookie Name	Classification	Duration	Operational Purpose
laravel_session	Strictly Necessary	120 Minutes / Session	Maintains your authenticated user session, tenant partition selection, and authorized role across page navigations. Transmitted exclusively over encrypted HTTPS with `HttpOnly` and `SameSite=lax` attributes.
XSRF-TOKEN	Strictly Necessary	Session	Prevents Cross-Site Request Forgery (CSRF) attacks by ensuring that state-changing requests originate from your authentic browser session and not a malicious third-party site.

4. Managing Your Cookie Preferences

Because the cookies used by Pochyaa are strictly essential to authenticate users and prevent financial transaction hijacking, the platform cannot function without them.

You can configure your browser to block or alert you about these cookies, but doing so will prevent you from signing in or utilizing the audit workspace. Most browsers allow you to review and delete stored cookies via browser settings (Settings > Privacy & Security > Cookies).

For inquiries regarding our cookie practices, contact: contact@pochya.com.