COOKIE POLICY

Cookie Policy

Version v1.0-2026-05Last updated: May 2026

PersoHR uses only strictly necessary cookies and equivalent local-storage entries for the in-app experience. We do not set advertising, retargeting or social-media tracking cookies. Because we do not set any non-essential cookies, no consent banner is required under the ePrivacy Directive and Cypriot Law 112(I)/2004. If we ever introduce optional cookies, we will publish an opt-in consent banner before any non-essential cookie is set.

Inside the PersoHR application

When you sign in to your PersoHR workspace, we set the following cookies and local-storage entries on the persohr.eu domain. All values are same-site only.

  • persohr_rt — HttpOnly, Secure, SameSite=Strict refresh-token cookie. Keeps you signed in for up to 7 days. Your browser sends it back automatically but JavaScript on the page cannot read it, which closes the XSS-refresh-token vector. Strictly necessary for authenticated use.
  • persohr-locale — localStorage entry that remembers your language preference between visits.
  • État éphémère du flux (persohr-registration-pending, persohr-email-verified, persohr-redirecting) : entrées localStorage et sessionStorage utilisées pour coordonner les onglets du navigateur lors de l’inscription et de la vérification de l’e-mail. Effacées dès que le flux est terminé.
  • Entrées localStorage pour bannières fermées (persohr-trial-banner-dismissed, persohr-birthday-banner-dismissed et similaires) : mémorisent les avis ponctuels dans le produit que vous avez déjà fermés afin de ne pas les afficher à nouveau.
  • Entrées localStorage de brouillons par fonctionnalité (persohr-payroll-export-config, pendingOnboardingTemplate) : enregistrent uniquement dans votre navigateur le travail en cours sur une fonctionnalité. Jamais envoyées aux serveurs PersoHR.
  • Entrées localStorage d’état de l’interface (barre latérale repliée, éléments récemment consultés, préférences de colonnes de tableaux) : conservées localement pour que l’interface reste cohérente entre les pages.
  • Stripe checkout cookies — set by Stripe.com during checkout when you upgrade a subscription. These are operated by Stripe under its own privacy policy. Strictly necessary for completing payment.

On the public marketing website

On the persohr.eu marketing website (logged-out browsing) we use a much smaller set of entries.

  • i18n_locale — a small localStorage entry that remembers the language you chose on the marketing site.
  • Plausible Analytics — used to count visits and conversion events on the marketing site and the public sign-up flow. Plausible is hosted in Estonia (EU), is cookieless and does not store IP addresses in raw form. Plausible is not active inside the authenticated application.

Future optional cookies

If we introduce optional cookies in the future (for example, embedded videos, third-party support chat or richer marketing analytics), we will publish a consent banner that respects opt-in before any non-essential cookie is set on your device, and we will update this Cookie Policy to describe the new entries.