Cookie Policy

What we store

Essential (always on)

These keep the site working. You cannot disable them because authentication and basic playback depend on them.

• Session cookie · set by our authentication provider (Better Auth). SameSite=Lax, domain-scoped to .pylon.video. Expires at sign-out.
• CSRF token · rotating anti-forgery token scoped to the session.
• Viewing-progress key · a small localStorage entry that remembers where you were in a film when you close the tab; used to resume playback.
• Offline-download session tag · derived server-side, keys the per-user IndexedDB store for downloaded titles. Never ships to third parties.

Analytics (optional)

Default depends on where you are. In strict-consent regions (the EU/EEA, UK, Switzerland and Brazil), analytics is off until you accept. Everywhere else it is on by default, and you can turn it off at any time via Reject non-essential or the Manage drawer below.

• PostHog · anonymous product analytics. No advertising signals, no cross-site tracking, first-party domain only. We route PostHog through api.pylon.video/i/* (ingestion) and api.pylon.video/e/* (decide / events) so the PostHog host never sees your browser directly.

Marketing (optional)

Same regional defaults as Analytics: off until you accept in strict-consent regions (the EU/EEA, UK, Switzerland and Brazil); on by default elsewhere, and you can turn it off at any time. The free, ad-supported tier serves ads through Google whether or not you opt in; opting in to Marketing is what lets those ads be personalised to you. Premium subscribers see no ads apart from an occasional sponsored premiere.

• Marketing pixels (Meta, X) · set when Marketing is enabled, on non-playback pages only, to measure our own advertising (third-party cookies such as Meta's _fbp). They never load on playback pages (/watch, /premiere, /party, /g): the page you are watching on is never sent to Meta or X, regardless of your consent settings. (Serving an ad on the free tier necessarily tells Google’s ad server which film the ad plays in; Premium has no ads apart from an occasional sponsored premiere.) Conversion events are also forwarded server-to-server to the ad platforms we advertise on (Meta, Reddit, TikTok, X) through our own tagging server, gated by the same Marketing consent. Exercising Do Not Sell or Share turns the pixels off immediately, with precedence over an earlier Accept all; opting back in clears the override only.
• Advertising (Google IMA) · on the free tier, Google's ad servers may set their own cookies for frequency capping and fraud prevention. Ads are non-personalised unless you grant Marketing consent (and are always non-personalised in the EEA, UK, Switzerland and Brazil). Exercising Do Not Sell or Share keeps them non-personalised too.
• Newsletter attribution · a short-lived cookie (30 days) set when you subscribe so we can tell which page drove the subscription. No cross-site signal; used in aggregate.

Change your choice

Your consent is stored locally under the key pylon.consent.v2, both as a cookie scoped to pylon.video (so a choice made on one PYLON subdomain applies to all of them) and in this browser's localStorage. We do not sync this choice across devices; each browser remembers its own preference.

Third-party cookies

With Marketing enabled, the Meta and X pixels set third-party cookies (such as _fbp) on non-playback pages; with Marketing off (by regional default, by your choice here, or via Do Not Sell or Share) it sets none. Our analytics pipeline sets none in any configuration: we proxy PostHog ingestion so no third-party cookies reach your browser from it. On the free, ad-supported tier, Google's ad servers (Interactive Media Ads) may set their own third-party cookies when an ad is requested; these are not set for Premium subscribers, apart from an occasional sponsor spot on a premiere. Embedded Mux player iframes may set a first-party cookie to resume playback if you return to the same film on the same browser.

Contact

Questions? Email privacy@pylon.video.