This Cookie Policy explains what cookies and similar technologies Pinpinmo Inc. uses on pinpinmo.com, why we use them, and how you can control them. This policy should be read alongside our Privacy Policy.
Cookies are small text files placed on your device by a website you visit. They serve many purposes: keeping you logged in between page loads, remembering your preferences, helping us understand how visitors use the site, and detecting fraudulent activity. We also use browser localStorage for some functions — technically different from cookies, but serving similar purposes.
| Name | Type | Duration | Purpose |
|---|---|---|---|
ppm_token | Essential | Session / 30 days | Buyer authentication. Set as an apex cookie on pinpinmo.com so it is readable from store subdomains. Contains a signed JWT with buyer ID and email claim. HttpOnly, Secure, SameSite=Lax. |
ppm_token (localStorage) | Essential | Until sign-out | Creator (merchant) authentication. Stored in browser localStorage rather than a cookie to prevent it from being sent on every HTTP request. Contains a signed JWT with store ID and creator email. |
__stripe_mid | Functional / Fraud prevention | 1 year | Set by Stripe during checkout to detect fraudulent payment attempts. Required for Stripe Radar fraud scoring. Pinpinmo does not read or process this cookie directly. |
__stripe_sid | Functional / Fraud prevention | 30 minutes | Short-lived Stripe session cookie used during active checkout flows to correlate browser sessions with payment intents for fraud detection. |
cf_clearance | Security | 1 year | Set by Cloudflare after a visitor passes a security challenge (e.g., bot detection). Allows the visitor to proceed without repeated challenges on subsequent requests within the validity period. |
__cf_bm | Security | 30 minutes | Cloudflare Bot Management cookie. Distinguishes between legitimate human visitors and automated bot traffic. Protects Pinpinmo platform APIs from scraping and abuse. |
ppm_cart (localStorage) | Functional | Until cleared | Stores your shopping cart contents locally so your cart persists between page loads without requiring a server round-trip. Contains product IDs and quantities only — no payment data. |
ppm_analytics | Analytics | 90 days | A randomly generated anonymous visitor ID used to count unique visits and page views. Not linked to any personal account. Used to understand which pages are popular and improve the platform. No cross-site tracking. |
Pinpinmo uses Cloudflare as its CDN and security layer. Cloudflare may set additional cookies for performance optimization, DDoS mitigation, and bot detection. These cookies are controlled by Cloudflare's systems and may vary based on your location and threat level. Cloudflare's cookie usage is described in their privacy policy at cloudflare.com/privacypolicy.
Browser settings. All modern browsers allow you to view, block, and delete cookies. Here are direct links to cookie settings for common browsers:
Important: Blocking the ppm_token cookie will prevent you from staying signed in. Blocking Stripe cookies may cause checkout to fail or trigger additional fraud checks. We recommend allowing essential cookies for the best experience.
localStorage. You can clear localStorage through your browser's developer tools (Application tab → Storage → Local Storage → pinpinmo.com → Clear). This will sign you out of creator sessions and clear your cart.
We may update this Cookie Policy when we add new features, change service providers, or revise our approach to analytics. Material changes will be communicated via a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.
Email privacy@pinpinmo.com.