Cookie policy
Last updated August 23, 2026
Last updated: 23 August 2026
This Cookie Policy explains which cookies PongSwap uses, what they are for and how long they stay on your device.
Read it alongside the Privacy Policy and the Terms and Conditions.
1. What a cookie is
A cookie is a small text file that a website places in your browser and that the browser sends back on subsequent requests. It is the mechanism that keeps you signed in as you move from one page to the next.
2. The principle we follow
PongSwap uses strictly necessary cookies only.
We use no advertising cookies, no tracking cookies, no social network cookies and no analytics cookies. There are no third-party pixels on our pages. We do not build browsing profiles, and we do not share browsing information with advertisers or data brokers.
This is a product design decision rather than a statement of intent: the list in section 3 is the complete list, and an automated test in our code holds the retention periods shown there.
3. The cookies we use
| Name | Purpose | Retention | Set by |
|---|---|---|---|
pongswap-session |
Identifies your session. It is what keeps you signed in and what protects forms against abuse. | 2 hours of inactivity | PongSwap |
XSRF-TOKEN |
Cross-site request forgery (CSRF) protection. It ensures a form submitted on PongSwap genuinely came from PongSwap. | 2 hours | PongSwap |
sell_draft |
Holds the listing you are filling in before you have an account, so you do not lose your work if you close the tab. Once you create an account the draft moves into your account and this cookie is no longer used. | 14 days | PongSwap |
cookie_notice |
Records that you have dismissed the notice shown in the footer, so it is not shown again. | 1 year | PongSwap |
Except for XSRF-TOKEN, which has to be readable by the browser to do its job, all of
these are HttpOnly — code running on the page cannot read them. In production they
are also sent over an encrypted connection only, and restricted to the pongswap.com
domain.
None of these cookies contains your name, your email address, your phone number or your password.
4. Cloudflare Turnstile
To protect SMS verification codes against automated abuse, PongSwap uses Cloudflare Turnstile, and only from the third consecutive code request from the same access point onwards.
In that situation — and only in that situation — your browser contacts Cloudflare, which may use its own mechanisms to tell a person apart from a program. We chose Turnstile precisely because it does not rely on advertising profiles and does not follow you across websites.
Anyone browsing, searching or viewing listings never contacts Cloudflare this way.
5. Why we do not ask for consent
The applicable law — Article 5(3) of Directive 2002/58/EC, transposed into Portuguese law by Law no. 41/2004 — does not require prior consent for cookies strictly necessary to provide a service the user has expressly requested.
Every cookie listed in section 3 falls within that category. As there are no cookies of any other kind, there is also no choice to put to you.
The notice in our footer is therefore informational: it tells you what we do, it does not ask permission. We deliberately chose not to show "accept" and "reject" buttons, because offering a choice that does not exist is worse than offering none.
Should PongSwap ever adopt cookies that require consent, this Policy will be updated and consent will be sought beforehand — freely given, specific and revocable.
6. Similar technologies
Beyond the cookies listed above, your browser may keep technical items needed to render pages, such as images and stylesheets held in temporary memory (cache). We do not use local storage, session storage, web beacons, device fingerprinting or advertising identifiers.
7. How to control cookies
You can delete or block cookies in your browser settings. Every current browser allows this, either globally or for a single website.
Do bear in mind, however, that these cookies are necessary for the Service to work: if you block them you will not be able to sign in or publish listings, and you will lose any draft in progress.
8. Changes to this Policy
This Policy may be updated whenever the cookies we use, the platform's technology or the applicable law change. The most recent version is always available on this page, with the date it was last updated.
9. Contact
For any question about cookies or about the processing of your personal data:
KOI SYSTEMS, Unipessoal Lda. NIF: 515 385 425 Rua Bernardo Santareno, n.º 316, R/C 2870-024 Montijo Portugal
Email: help@pongswap.com Website: pongswap.com