COOKIE POLICY

Cookie Policy

Version v1.0-2026-05Last updated: May 2026

PersoHR uses only strictly necessary cookies and equivalent local-storage entries for the in-app experience. We do not set advertising, retargeting or social-media tracking cookies. Because we do not set any non-essential cookies, no consent banner is required under the ePrivacy Directive and Cypriot Law 112(I)/2004. If we ever introduce optional cookies, we will publish an opt-in consent banner before any non-essential cookie is set.

Inside the PersoHR application

When you sign in to your PersoHR workspace, we set the following cookies and local-storage entries on the persohr.eu domain. All values are same-site only.

  • persohr_rt — HttpOnly, Secure, SameSite=Strict refresh-token cookie. Keeps you signed in for up to 7 days. Your browser sends it back automatically but JavaScript on the page cannot read it, which closes the XSS-refresh-token vector. Strictly necessary for authenticated use.
  • persohr-locale — localStorage entry that remembers your language preference between visits.
  • Staid sealadach sa sreabh (persohr-registration-pending, persohr-email-verified, persohr-redirecting): iontrálacha localStorage agus sessionStorage a úsáidtear chun cluaisíní brabhsálaí a chomhordú le linn cláraithe agus fíoraithe ríomhphoist. Glanta a luaithe a chríochnaíonn an sreabh.
  • Iontrálacha localStorage do mheirgí dúnta (persohr-trial-banner-dismissed, persohr-birthday-banner-dismissed agus a leithéid): cuimhníonn cé na fógraí aon uaire taobh istigh den táirge atá dúnta agat cheana, ionas nach dtaispeánfar arís iad.
  • Iontrálacha localStorage do dhréachtaí gné (persohr-payroll-export-config, pendingOnboardingTemplate): sábhálann siad d’obair leanúnach ar ghné i do bhrabhsálaí amháin. Ní sheoltar chuig freastalaithe PersoHR riamh iad.
  • Iontrálacha localStorage do staid an chomhéadain (barra taoibh comhbhrúite, míreanna a breathnaíodh orthu le déanaí, sainroghanna colúin tábla): coinnítear go háitiúil iad chun an comhéadan a choinneáil comhsheasmhach idir leathanaigh.
  • Stripe checkout cookies — set by Stripe.com during checkout when you upgrade a subscription. These are operated by Stripe under its own privacy policy. Strictly necessary for completing payment.

On the public marketing website

On the persohr.eu marketing website (logged-out browsing) we use a much smaller set of entries.

  • i18n_locale — a small localStorage entry that remembers the language you chose on the marketing site.
  • Plausible Analytics — used to count visits and conversion events on the marketing site and the public sign-up flow. Plausible is hosted in Estonia (EU), is cookieless and does not store IP addresses in raw form. Plausible is not active inside the authenticated application.

Future optional cookies

If we introduce optional cookies in the future (for example, embedded videos, third-party support chat or richer marketing analytics), we will publish a consent banner that respects opt-in before any non-essential cookie is set on your device, and we will update this Cookie Policy to describe the new entries.