PathruleCookie Policy
Version 1.3 · Takes effect on the date it is published
This Cookie Policy explains how Pathrule ("Pathrule", "we", "us", "our") uses cookies and similar technologies on the website at pathrule.io (the "Website"). It is part of, and should be read together with, our Privacy Policy (/privacy-policy) and Terms of Service (/terms-of-service).
Short version. The Website uses a small number of cookies and browser storage. Strictly necessary storage always runs because the site cannot function without it. Analytics cookies (Google Analytics 4) load only after you allow them, through Accept all in the cookie banner or in Cookie settings, for every visitor, and never while your browser sends Global Privacy Control. Cloudflare Web Analytics counts page views without cookies. You can change or withdraw your choice at any time from Cookie settings in the footer. The Pathrule CLI does not use HTTP cookies, and the product telemetry it sends is separate from this Website: it is anonymous, carries no account or content, and is off in CI. See section 9.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, remember your preferences, and provide information to the site operator about how the site is being used. This Policy also covers similar technologies that achieve the same purposes, for example localStorage, sessionStorage, IndexedDB, pixels and SDKs, even though they are not technically cookies. Where we say "cookies" in this Policy we mean any of these technologies.
A first-party cookie is set by the domain you are visiting (here, pathrule.io). A third-party cookie is set by a different domain whose code is loaded on the page (for example, an analytics provider).
2. Categories we use
We group cookies into the following categories. Only strictly necessary cookies are loaded before you make a choice. Everything else waits for your consent.
| Category | What it is for | Consent |
|---|---|---|
| Strictly necessary | Storage required for the Website to work and to remember your cookie choice. | Not required (essential under GDPR Recital 32 and ePrivacy Art. 5(3)) |
| Functional | Remembers a display preference you set, such as the language you pick in the footer or turning off the docs keyboard shortcuts. | Not required where strictly tied to a feature you actively use; otherwise consent |
| Analytics | Aggregated usage analytics: which pages visitors land on, how they move through the site, what country they are in. We use this to improve the product and prioritise work. | Consent required from every visitor; off while your browser sends Global Privacy Control |
| Marketing / advertising | Pathrule does not currently use marketing or advertising cookies, ad-network pixels, or cross-site tracking. If we ever do, we will update this Policy and ask for your consent first. | Consent required (currently none in use) |
3. Cookies on this Website
The list below describes the cookies and storage we set on pathrule.io. Names of cookies set by third-party services may change as those services evolve; we update this list when material changes occur.
| Name | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
pathrule_cookie_consent | pathrule.io (first party) | Stores your choice (whether analytics is allowed), the version of this Policy it answered and when, so we ask again only when this Policy changes. | localStorage | Until you change the choice, this Policy changes, or you clear site storage | Strictly necessary |
pathrule-section-keys | pathrule.io (first party) | Remembers whether the j / k section shortcuts in the docs are on, if you turn them off. | localStorage | Until you change it or clear site storage | Functional |
pathrule_locale | pathrule.io (first party) | Remembers the language you pick in the footer, so the site opens in that language next time. Set only when you choose a language. | Cookie | 1 year | Functional |
_ga | Google LLC / Google Ireland Ltd. (third party) | Distinguishes unique visitors so we can count visits and sessions accurately. | Cookie | 2 years (rolling) | Analytics |
_ga_FGFM3Q0BS2 | Google LLC / Google Ireland Ltd. (third party) | Used by Google Analytics 4 to persist session state for our specific measurement property. | Cookie | 2 years (rolling) | Analytics |
If you accept analytics cookies, Google Analytics 4 may also receive your truncated IP address, user-agent, page URL, referrer and event timing. We have IP-anonymisation enabled and we do not enable Google Signals, ads personalisation, advertising features, or data sharing with Google for advertising on this property; the site's own configuration also turns Google Signals and ad personalisation off and keeps advertising storage denied.
4. Third-party services that may receive data
The Website also loads resources from a small number of third parties. Some of these can technically observe a request (and therefore your IP address and user-agent) even when they do not set cookies on our site:
| Service | Provider | What it does | Sets cookies on pathrule.io? |
|---|---|---|---|
| Google Analytics 4 | Google Ireland Ltd., Ireland (data may be transferred to Google LLC, USA) | Aggregated visitor analytics. Loaded only after consent. | Yes (see section 3) |
| Cloudflare | Cloudflare, Inc., USA (global network) | Hosts the Website and counts page views with Cloudflare Web Analytics, which sets no cookies and uses no identifiers. Edge servers see standard request metadata (IP, user-agent) needed to serve the page. | No |
| Resend | Resend, Inc., USA | Delivers the contact and sales form messages to our team, from our server, only when you submit a form. | No |
For transfers to the United States, we rely on the EU-US Data Privacy Framework where the recipient is certified, on the UK Extension to the DPF for UK transfers, and on the European Commission's Standard Contractual Clauses (SCCs) where DPF certification does not apply, together with the supplementary measures described in our Privacy Policy, section 6 (/privacy-policy).
5. Legal basis for using cookies
Where the GDPR (Regulation (EU) 2016/679), the UK GDPR, the ePrivacy Directive (2002/58/EC, as transposed nationally, for example PECR in the UK), the Swiss FADP, and the Turkish KVKK apply, we rely on the following legal bases:
- Strictly necessary cookies. Article 5(3) of the ePrivacy Directive permits storage that is "strictly necessary in order to provide an information society service explicitly requested by the subscriber or user" without consent. We rely on this for cookies that make the site work and that record your cookie-banner choice. Where personal data processing is also involved, the legal basis under GDPR is our legitimate interest in operating a secure, functional website (Article 6(1)(f)).
- Analytics cookies. We rely on your consent under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) of the GDPR. We ask for that consent through our cookie banner before any analytics tag fires. You can withdraw consent at any time and the withdrawal does not affect the lawfulness of processing carried out before it.
- Functional cookies. Where a functional cookie is strictly necessary to deliver a feature you actively turned on, we treat it as essential and rely on the same basis as strictly necessary cookies. Otherwise we ask for consent.
Under the Turkish KVKK we treat consent under Article 5(1) of Law No. 6698 as our legal basis for non-essential cookies in the same way the GDPR requires.
6. How long cookies last
Cookies are either session cookies, which are deleted as soon as you close the browser, or persistent cookies, which stay on your device for a defined period (or until you delete them). The duration for each cookie we set is shown in the table in section 3. We never set a cookie for longer than is necessary for the purpose described.
7. Your choices and how to withdraw consent
You have several ways to control cookies on this Website:
- Cookie banner. The first time you visit the Website, and again when this Policy changes, you see a banner with Accept all, Reject all and Customize. Customize opens Cookie settings, where analytics has its own switch. Cookie settings and Your Privacy Choices in the footer of every page open the same settings at any time.
- Withdraw consent. If you allowed analytics, turn it off in Cookie settings (or choose Reject all). Google Analytics stops collecting, the site removes the
_gacookies it can reach, and later page loads do not load the analytics script. Events Analytics recorded on the open page before you withdrew may still be sent once when you leave that page, without cookies. - Browser controls. Most browsers let you block or delete cookies. The exact steps vary; see your browser's help pages for Chrome, Safari, Firefox, Edge, Brave or Arc. Note that blocking strictly necessary cookies will break the site.
- Google Analytics opt-out. You can install the official Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout (https://tools.google.com/dlpage/gaoptout), which prevents the GA4 script from sending data on any site you visit.
- Right to object and other rights. Where we process personal data through cookies you can also exercise the rights described in section 8 of our Privacy Policy (/privacy-policy), including the right to object, the right of access, and the right to lodge a complaint with your supervisory authority. Regional details for the EEA and UK, US states and Canada are in section 15 of the Privacy Policy.
8. Do Not Track and Global Privacy Control
Some browsers send a Global Privacy Control (GPC) signal or a Do Not Track (DNT) header. The Website honours GPC: when your browser sends it, analytics stays off, the consent banner is not shown, and Cookie settings explains why. There is no industry-wide standard for DNT, so we do not act on it; analytics still stays off until you allow it. We do not sell personal data or share it for cross-context behavioural advertising.
9. Cookies in the Pathrule CLI
The Pathrule CLI does not use HTTP cookies. It stores its settings and credentials in its own user-only data directory on your device (by default ~/.pathrule), not as browser cookies.
Product telemetry has a separate opt-in setting. The standalone local CLI sends none. A signed-in managed CLI sends anonymous usage events only after pathrule telemetry enable. They contain no code, paths, prompts, knowledge, email, account or workspace ids. pathrule telemetry disable, NO_TELEMETRY=1, DO_NOT_TRACK=1 and CI keep it off. These optional events go to PostHog’s EU ingestion service, separately from website analytics. See Security.
10. Changes to this Policy
We may update this Cookie Policy from time to time, for example when we add or remove a service, when a third party renames a cookie, or when the law changes. The version shown at the top of this page reflects the most recent revision. Every new version asks for your choice again through the cookie banner, so you can review it after material changes (a new third-party tracker, a change in legal basis, or a new category of cookies).
11. Contact
- Operator: Pathrule
- Registered address: 30 Ağustos Zafer Mah. 73. Sok. No:3, Bursa/Nilüfer, Türkiye
- Privacy contact: privacy@pathrule.io
- Data Protection & KVKK contact person: Sertan Helvacı, sertan@pathrule.io
Questions about cookies, tracking, or how to exercise your rights? Email privacy@pathrule.io.