What Cookies Are
Cookies are small text files stored on your device when you visit a website. They help websites remember preferences and understand usage patterns. This policy also covers similar technologies such as browser local storage, which we use for consent preferences.
Cookies and Storage We Use
The following table lists the specific cookies and local-storage keys used across the Pangea Research platform.
| Name | Type | Domain | Purpose | Expiration |
|---|---|---|---|---|
| `session` | Cookie (HttpOnly, Secure) | pangearesearch.io | Admin authentication session | Browser session |
| `__csrf` | Cookie (HttpOnly, Secure) | pangearesearch.io | CSRF protection token | Browser session |
| `__Host-session` | Cookie (HttpOnly, Secure, SameSite=Strict) | Platform domains | Platform login session | 24 hours |
| `cookie_preferences_v1` | localStorage | pangearesearch.io | Stores your cookie/analytics consent choice | Persistent until cleared |
Cloudflare Web Analytics (marketing site): This is loaded as an opt-in script when you consent to analytics. It collects aggregate pageview and performance data. It does not set any cookies and does not track individual users across sites.
Server-side analytics (Platform — Lab, Academy, Factory): Usage events (page views and feature interactions) are recorded server-side when your account analytics consent is enabled. Page view events are emitted to structured server logs; feature interaction events are stored in our database. No third-party cookies are involved.
Preference storage remembers your saved choices (theme, locale, cookie preferences) via localStorage.
Third-Party Resources
The Platform loads resources from third-party servers that may set their own cookies or log request data:
- Cloudflare Turnstile (challenges.cloudflare.com) — A bot-protection challenge loaded on form pages (contact, registration, newsletter). Turnstile is classified as strictly necessary for spam and abuse prevention — it protects form submissions and does not require cookie consent. Turnstile does not set tracking cookies and does not profile users. See Cloudflare's privacy policy for details.
- Stripe (js.stripe.com) — Payment processing scripts are loaded on pages with payment features. Stripe may set cookies for fraud prevention. See Stripe's privacy policy for details.
Fonts (Roboto, Roboto Mono) are self-hosted from our own domain and do not involve third-party requests.
We do not use advertising cookies, retargeting pixels, or social media tracking widgets.
Analytics Details
Marketing site (pangearesearch.io): When you opt in via the cookie banner, Cloudflare Web Analytics collects aggregate traffic and page performance data. Cloudflare Web Analytics is privacy-focused — it does not use client-side cookies and does not track individual users across sites.
Platform (Lab, Academy, Factory): Server-side analytics events are recorded only when your account's analytics consent is enabled. Events include page views and feature interactions (such as onboarding progress). No client-side cookies are set for analytics. Page view events are emitted to structured server logs; feature interaction events are stored in our database with IP addresses truncated to /24 blocks after 30 days and deleted after one year. See our Privacy Policy for full data retention details.
Managing Your Choices
Cookie banner (marketing site): You can accept or decline analytics from the banner shown on your first visit. Reopen your settings at any time using the "Manage Cookies" control in the footer. Because Cloudflare Web Analytics uses no cookies, opting out simply prevents the analytics script from loading.
Account settings (Platform): Analytics consent for the Platform is controlled through your account preferences. You can enable or disable analytics tracking at any time.
Browser controls: Most browsers let you block or delete cookies. Blocking essential cookies may prevent you from logging in or using core features.
Essential cookies remain enabled because they are required for site operation and security.
Contact
Questions about this Cookie Policy can be directed to privacy@pangearesearch.io or submitted through our contact form.
Last Updated: March 15, 2026
© 2026 Pangea Research LLC.