Cookie Policy

Last updated: April 2026

How PnP Tax Uses Cookies and Local Storage

PnP Tax uses a minimal set of cookies and browser local storage to operate our services. We do not use third-party tracking cookies, advertising pixels, or analytics cookies from external providers.

When you visit pnp.tax, a consent banner gives you two options:

  • Accept All — Enables functional cookies and our own page view analytics
  • Functional Only — Only essential cookies required for the site to work

What Are Cookies and Local Storage?

Cookies are small files placed on your device by a website. PnP uses one httpOnly cookie that JavaScript cannot read — it is sent automatically by your browser with each request and used solely for authentication.

Local storage is data saved in your browser. Unlike cookies, local storage is never sent to our servers automatically. We use it to remember your preferences and wallet connection state on your device only.

Cookies We Set

Name Type Purpose Duration
pnp_access_token httpOnly Cookie Authentication — grants access to tools after payment or wallet verification. Cannot be read by JavaScript. 24 hours

That's it. One essential cookie. No third-party advertising or tracking cookies. No tracking pixels. No Google Analytics.

Browser Storage We Use

The following data is stored in your browser. This data never leaves your device — it is not sent to our servers. Items marked "Session" are cleared when you close the tab or hard-refresh; items marked "Persistent" remain until you clear them.

Name Storage Purpose Duration
pnp_wallet Session Connected wallet address for auto-reconnect within this tab Tab close / hard refresh
pnp_tier Session Token holder tier (Whale, Shark, or Fish) Tab close / hard refresh
pnp_disconnected Session Prevents auto-reconnect after explicit disconnect Tab close / hard refresh
pnp_cookie_consent Persistent Remembers your cookie consent choice Until cleared
pnp_theme Persistent Gold/blue theme preference Until cleared
pnp_manual_session Persistent Manual payment session wallet (survives modal close) Until payment completes or 30 min
BSP_TERMS_* Persistent Terms of Service acceptance (version + timestamp) Until cleared

Server-Side Storage (Strictly Necessary)

In addition to browser storage, the following data may be stored on our servers. These are essential for the service to function:

Name Purpose Duration
Free Mode IP Hash When you use our tools without logging in, we temporarily use a one-way hash of your IP address to link your uploaded files to your download requests. This is required for the service to function. The hash cannot be reversed to identify you. No persistent cookies are set for this purpose. Automatically deleted within 24 hours

Analytics

If you choose "Accept All" on the consent banner, we track basic page views using our own first-party analytics system. This data includes:

  • Which page was visited (e.g., Bank Processor, Labeler, TIS)
  • A hashed version of your IP address (we never store your actual IP)
  • Whether you are a new or returning visitor (per day)

We do not use Google Analytics, Facebook Pixel, or any third-party tracking service. Our analytics dashboard is publicly viewable — you can see exactly what we track.

Third-Party Services

The following third-party services may set their own cookies or store data when you interact with them:

  • Phantom Wallet — The Phantom browser extension manages its own cookies and storage for wallet functionality. See Phantom's Privacy Policy.
  • Stripe — If you pay by credit card, Stripe handles payment processing and may set its own cookies for fraud prevention. See Stripe's Privacy Policy.
  • Cloudflare — Our hosting may use Cloudflare for performance and security, which may set a __cf_bm cookie for bot detection. See Cloudflare's Privacy Policy.

How to Manage Cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies
  • Block all cookies or only third-party cookies
  • Clear local storage data

Note that blocking the pnp_access_token cookie will prevent you from accessing paid tools, as it is required for authentication.

Contact

If you have questions about our cookie practices, contact us at [email protected].