COOKIE POLICY

Cookie Policy

Version v1.0-2026-05Last updated: May 2026

PersoHR uses only strictly necessary cookies and equivalent local-storage entries for the in-app experience. We do not set advertising, retargeting or social-media tracking cookies. Because we do not set any non-essential cookies, no consent banner is required under the ePrivacy Directive and Cypriot Law 112(I)/2004. If we ever introduce optional cookies, we will publish an opt-in consent banner before any non-essential cookie is set.

Inside the PersoHR application

When you sign in to your PersoHR workspace, we set the following cookies and local-storage entries on the persohr.eu domain. All values are same-site only.

  • persohr_rt — HttpOnly, Secure, SameSite=Strict refresh-token cookie. Keeps you signed in for up to 7 days. Your browser sends it back automatically but JavaScript on the page cannot read it, which closes the XSS-refresh-token vector. Strictly necessary for authenticated use.
  • persohr-locale — localStorage entry that remembers your language preference between visits.
  • Lyhytaikainen prosessitila (persohr-registration-pending, persohr-email-verified, persohr-redirecting): localStorage- ja sessionStorage-merkinnät, joilla koordinoidaan selaimen välilehtiä rekisteröitymisen ja sähköpostin vahvistuksen aikana. Tyhjennetään heti kun prosessi on valmis.
  • Suljettujen bannerien localStorage-merkinnät (persohr-trial-banner-dismissed, persohr-birthday-banner-dismissed ym.): muistavat, mitkä kertaluonteiset ilmoitukset tuotteessa olet jo sulkenut, jotta niitä ei näytetä uudelleen.
  • Toimintokohtaisten luonnosten localStorage-merkinnät (persohr-payroll-export-config, pendingOnboardingTemplate): tallentavat keskeneräisen työsi toiminnossa vain selaimeesi. Niitä ei koskaan lähetetä PersoHR:n palvelimille.
  • Käyttöliittymän tilan localStorage-merkinnät (supistettu sivupalkki, viimeksi katsotut kohteet, taulukoiden sarakeasetukset): säilytetään paikallisesti, jotta käyttöliittymä pysyy yhdenmukaisena sivulta toiselle siirryttäessä.
  • Stripe checkout cookies — set by Stripe.com during checkout when you upgrade a subscription. These are operated by Stripe under its own privacy policy. Strictly necessary for completing payment.

On the public marketing website

On the persohr.eu marketing website (logged-out browsing) we use a much smaller set of entries.

  • i18n_locale — a small localStorage entry that remembers the language you chose on the marketing site.
  • Plausible Analytics — used to count visits and conversion events on the marketing site and the public sign-up flow. Plausible is hosted in Estonia (EU), is cookieless and does not store IP addresses in raw form. Plausible is not active inside the authenticated application.

Future optional cookies

If we introduce optional cookies in the future (for example, embedded videos, third-party support chat or richer marketing analytics), we will publish a consent banner that respects opt-in before any non-essential cookie is set on your device, and we will update this Cookie Policy to describe the new entries.