1. What cookies are
Cookies are small text files that websites place on your device. They help remember preferences, keep your session signed in, and analyse usage. We also use browser storage (localStorage) for the same purposes and cover it under “cookies” in this policy.
We distinguish two kinds: session cookies (deleted when you close the browser) and persistent cookies (kept for a set period).
2. Necessary cookies
These cookies are required for the core operation of the platform and cannot be switched off. They are set by our API host when you sign in.
session_token: authenticates your session after sign-in. Not accessible to scripts (HttpOnly). Persistent, valid 7 days and renewed while you use the app.
session_id: an additional session cookie used as a compatibility fallback. Persistent, valid 7 days.
oauth_state: short-lived protection against cross-site request forgery (CSRF) during the sign-in flow. Expires after 10 minutes.
Besides cookies we use browser local storage (localStorage) for preferences such as theme, language and your cookie-consent choice. These values stay on your device.
3. Analytics cookies
These cookies are optional and load only after your explicit consent via the cookie banner of the respective site.
_ga, _ga_*: Google Analytics; aggregated visitor metrics for the website. Expire within 2 years.
ph_*: PostHog; product analytics about how the site is used. Cookies and localStorage entries.
In the application (my.smetni.app) and in the client portal (clients.smetni.app), PostHog product analytics and Grafana Faro telemetry are enabled only after your consent via the respective consent banner; you can change your choice at any time from the “Cookie settings” link at the bottom of each site. Details about this data are set out in the Privacy Policy.
4. Third-party cookies
When you pay by card, Stripe sets its own cookies for security and fraud prevention on my.smetni.app, typically __stripe_mid (persistent, about 1 year) and __stripe_sid (about 30 minutes). These cookies are managed by Stripe and subject to their policy.
5. Managing preferences
You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of the page.
You can also manage cookies directly through your browser: most allow blocking or deleting them. Note that blocking necessary cookies may affect functionality.
6. Changes to the policy
Updates to this policy are published on this page with a revised change date. For significant changes we will notify you within the platform.