COOKIE POLICY

Cookie Policy

Version v1.0-2026-05Last updated: May 2026

PersoHR uses only strictly necessary cookies and equivalent local-storage entries for the in-app experience. We do not set advertising, retargeting or social-media tracking cookies. Because we do not set any non-essential cookies, no consent banner is required under the ePrivacy Directive and Cypriot Law 112(I)/2004. If we ever introduce optional cookies, we will publish an opt-in consent banner before any non-essential cookie is set.

Inside the PersoHR application

When you sign in to your PersoHR workspace, we set the following cookies and local-storage entries on the persohr.eu domain. All values are same-site only.

  • persohr_rt — HttpOnly, Secure, SameSite=Strict refresh-token cookie. Keeps you signed in for up to 7 days. Your browser sends it back automatically but JavaScript on the page cannot read it, which closes the XSS-refresh-token vector. Strictly necessary for authenticated use.
  • persohr-locale — localStorage entry that remembers your language preference between visits.
  • Kortvarig procestilstand (persohr-registration-pending, persohr-email-verified, persohr-redirecting): localStorage- og sessionStorage-poster, der bruges til at koordinere browserfaner under tilmelding og e-mailverifikation. Slettes så snart processen er gennemført.
  • localStorage-poster for afviste bannere (persohr-trial-banner-dismissed, persohr-birthday-banner-dismissed og lignende): husker, hvilke engangsmeddelelser i produktet du allerede har afvist, så vi ikke viser dem igen.
  • localStorage-poster for funktionsudkast (persohr-payroll-export-config, pendingOnboardingTemplate): gemmer dit igangværende arbejde i en funktion kun i browseren. Sendes aldrig til PersoHR’s servere.
  • localStorage-poster for UI-tilstand (sammenfoldet sidepanel, senest viste elementer, kolonneindstillinger for tabeller): bevares lokalt for at holde grænsefladen konsekvent på tværs af sidenavigationer.
  • Stripe checkout cookies — set by Stripe.com during checkout when you upgrade a subscription. These are operated by Stripe under its own privacy policy. Strictly necessary for completing payment.

On the public marketing website

On the persohr.eu marketing website (logged-out browsing) we use a much smaller set of entries.

  • i18n_locale — a small localStorage entry that remembers the language you chose on the marketing site.
  • Plausible Analytics — used to count visits and conversion events on the marketing site and the public sign-up flow. Plausible is hosted in Estonia (EU), is cookieless and does not store IP addresses in raw form. Plausible is not active inside the authenticated application.

Future optional cookies

If we introduce optional cookies in the future (for example, embedded videos, third-party support chat or richer marketing analytics), we will publish a consent banner that respects opt-in before any non-essential cookie is set on your device, and we will update this Cookie Policy to describe the new entries.