1. What they are and what we use
A cookie is a small file the browser keeps to remember something between one page and the next: that you signed in, which language you read in, or whether you accepted measurement.
Besides cookies we use the browser's local storage, which works the same from your side —it stays on your device— but does not travel to the server with every request. We cover both here because, in terms of what is stored on your device, they are the same thing.
2. Strictly necessary
Without them you cannot sign in or buy, so they cannot be switched off from the platform. They are not used for measurement or advertising.
| Name | What for | Duration |
|---|---|---|
| parchesnow_session | Flags that a session is open, so the page need not ask the server on every load | 14 days |
| parchesnow_access | Identifies you to the server. The page's JavaScript cannot read it. It renews itself while the session stays open | 1 hour |
| parchesnow_refresh | Renews the session without asking for your password. Sent only to the authentication route | 14 days |
| pn_oauth | Ties the outbound and inbound halves of Google sign-in and stops that step being hijacked | 5 minutes |
| pn_link | Holds the ticket to link your Google account with an existing one | 10 minutes |
| pn_order | If you buy without an account, holds your order’s key so you can pay for it, see it when you come back from the payment gateway and, if you wish, create your account. Page JavaScript cannot read it and it is only sent to the store’s purchase routes | 6 hours |
| pn_cart | Holds your cart's identifier, so what you added is still there when you come back. It is only created the first time you add something. The page's JavaScript cannot read it | 30 days |
| pn_local_order_cart | Stores items selected for your local in-person venue order, table and notes, so you do not lose them while browsing. Lives in browser local storage | Until the order is placed or cleared |
| pn_checkout_key | A key for the purchase in progress: if the connection drops and you try again, you get the same order back instead of being charged twice. It lives in the tab's storage | Until you close the tab |
| pn_checkout_draft | What you typed on the delivery step, so you do not lose it if you leave to sign in, except your ID number, which is never stored. It lives in the tab's storage and is removed as soon as the order exists | Until you close the tab |
| pn-place-submission-draft | The text fields of the form to register a place, in case you reload the page. It keeps no photos and no acceptance boxes. It lives in the tab's storage | Until you close the tab |
| pn.business.place | The place you are managing your business with, so it stays the same when you switch profile or screen. Only the place's identifier; it lives in the tab's storage | Until you close the tab |
3. Preference
They remember how you like to see the platform. You can delete them and lose nothing: they are recreated with whatever you choose.
Earlier versions of the site also stored parchnow-locale-use-browser and pn-theme. They are no longer created: they are only read once to carry your preferences over to pn-preferences, and you can delete them.
| Name | What for | Duration |
|---|---|---|
| parchnow-locale | The language you read the site in | 1 year |
| parchnow-privacy-consent | Stores whether you accepted or declined measurement, so we stop asking | Until you delete it |
| pn-preferences | The colour theme and the language you chose in your preferences | Until you delete it |
| pn-display-currency | The currency you see the store's prices in. It only changes how they are shown: you are always charged in pesos | Until you delete it |
| pn-fx-rate | The exchange rate used to work out that view in dollars | Until you close the tab, and 6 hours at most |
| pn-announcement-dismissed | Which notice in the top bar you closed, so we do not show it again | Until you delete it |
| pn:descubrir:busquedas | What you typed in the Discover search boxes, to suggest it next time | Until you delete it |
| parches-discover-user-location | The point you want to see what is nearby from, as you chose it or as your device measured it, unblurred. It does not travel to the server: what is tied to your account is blurred first | If you chose it, until you delete it; if your device measured it, 6 hours |
| parches-location-blur-seed | A random code in this browser that decides how your location is blurred before it is tied to your account | Until you delete it |
4. Measurement, only if you accept
We use Google Analytics 4, with the IP address anonymised. It tells us which pages are used and where people get stuck.
Cloudflare Web Analytics, which we also use to count visits, is not in the table because it creates no cookie and stores nothing in your browser: it only adds up page views and load times in aggregate.
The store's and the places' own count is not in the table either: it creates no cookie and stores nothing in your browser. It is explained in the privacy policy.
It does not load until you accept: while you have not answered the notice, or if you decline, the script is never downloaded and these cookies are never created. If you accept, these are the ones it sets:
| Name | Who sets it | Duration |
|---|---|---|
| _ga | Google Analytics: distinguishes browsers | 2 years |
| _ga_ plus the identifier | Google Analytics: keeps session state | 2 years |
5. Advertising, on the same permission
The site shows Google AdSense ads, and its script ships with every page. What your answer to the notice decides is PERSONALISATION: without an explicit yes, ads are picked from the content of the page and Google does not use what it knows about you, so the personalisation cookies are never created. The measurement and anti-fraud ones may still be set, to count the impression and spot fake clicks.
Google uses them to avoid repeating the same ad, to measure whether it worked and to detect fraud. The exact list depends on where you are and on whether personalisation is on; these are the usual ones:
| Name | Who sets it | Duration |
|---|---|---|
| __gads | Google AdSense: measures interaction and caps repeats | 13 months |
| __gpi | Google AdSense: ad personalisation | 13 months |
| __eoi | Google AdSense: fraud detection | 6 months |
| IDE | Google (doubleclick.net): campaign measurement | 13 months |
6. What we still do not do
We do not sell your data and we do not share your activity with any network beyond the Google one described above. And we do not use what we know about you as a user — your email, your purchases, your plans, your clubs — to target ads: Google picks them from the content of the page and from what it already knew about you, not from what you told us.
7. How to change your mind
Measurement and advertising are switched on and off together from your preferences, and the change is immediate: turning them off removes the scripts from the browser there and then. Any ads already painted are gone on the next page you open.
You can also delete or block cookies from your browser settings. Note that blocking the necessary ones means you cannot sign in or complete a purchase.
8. Third-party content
Some pages load maps, images or video served by third parties. Those providers may log the request in order to serve the file; we place no advertising in them and give them none of your account data.
9. Changes to this policy
If we add or drop a cookie we update the tables above and the revision date. The version in force always lives at this address.
10. More information
What we do with what these tools collect is in the privacy policy. And if a question remains, write to us at [email protected]
Last revised: October 2026