COOKIE POLICY
Cookie Policy
PersoHR uses only strictly necessary cookies and equivalent local-storage entries for the in-app experience. We do not set advertising, retargeting or social-media tracking cookies. Because we do not set any non-essential cookies, no consent banner is required under the ePrivacy Directive and Cypriot Law 112(I)/2004. If we ever introduce optional cookies, we will publish an opt-in consent banner before any non-essential cookie is set.
Inside the PersoHR application
When you sign in to your PersoHR workspace, we set the following cookies and local-storage entries on the persohr.eu domain. All values are same-site only.
- persohr_rt — HttpOnly, Secure, SameSite=Strict refresh-token cookie. Keeps you signed in for up to 7 days. Your browser sends it back automatically but JavaScript on the page cannot read it, which closes the XSS-refresh-token vector. Strictly necessary for authenticated use.
- persohr-locale — localStorage entry that remembers your language preference between visits.
- Stat ta’ fluss għal żmien qasir (persohr-registration-pending, persohr-email-verified, persohr-redirecting): entrati localStorage u sessionStorage użati biex jikkoordinaw it-tabs tal-browser waqt ir-reġistrazzjoni u l-verifika tal-email. Jitneħħew malli l-fluss jitlesta.
- Entrati localStorage għal banners mwarrba (persohr-trial-banner-dismissed, persohr-birthday-banner-dismissed u simili): jiftakru liema avviżi ta’ darba fil-prodott diġà għalaqt biex ma nuruhomx mill-ġdid.
- Entrati localStorage għal abbozzi tal-karatteristiċi (persohr-payroll-export-config, pendingOnboardingTemplate): isalvaw ix-xogħol fil-proċess fuq karatteristika fil-browser tiegħek biss. Qatt ma jintbagħtu lis-servers ta’ PersoHR.
- Entrati localStorage għall-istat tal-interfaċċa (sidebar imkebbeb, oġġetti li dehru riċentement, preferenzi tal-kolonni tat-tabelli): jinżammu lokalment biex l-interfaċċa tibqa’ konsistenti meta tinnaviga bejn paġni.
- Stripe checkout cookies — set by Stripe.com during checkout when you upgrade a subscription. These are operated by Stripe under its own privacy policy. Strictly necessary for completing payment.
On the public marketing website
On the persohr.eu marketing website (logged-out browsing) we use a much smaller set of entries.
- i18n_locale — a small localStorage entry that remembers the language you chose on the marketing site.
- Plausible Analytics — used to count visits and conversion events on the marketing site and the public sign-up flow. Plausible is hosted in Estonia (EU), is cookieless and does not store IP addresses in raw form. Plausible is not active inside the authenticated application.
Future optional cookies
If we introduce optional cookies in the future (for example, embedded videos, third-party support chat or richer marketing analytics), we will publish a consent banner that respects opt-in before any non-essential cookie is set on your device, and we will update this Cookie Policy to describe the new entries.