Cookie Policy

The short answer

The Vardify panel uses only strictly necessary cookies and browser storage (ePrivacy Directive art. 5(3), second sentence). There are no advertising cookies, tracking pixels, third-party analytics or session recording. That is why no cookie consent banner appears: consent is required only for cookies that are not strictly necessary.

What is used

• Session cookie — Type: HTTP cookie · Lifetime: For the session · Why it is necessary: Recognises you once you have signed in. Without it, every page would ask you to sign in again.
• CSRF token — Type: HTTP cookie · Lifetime: For the session · Why it is necessary: Stops forms being submitted from another site.
• Language preference — Type: localStorage · Lifetime: Until you clear it · Why it is necessary: Remembers the interface language you chose.
• Theme preference (light/dark) — Type: localStorage · Lifetime: Until you clear it · Why it is necessary: Remembers the appearance you chose.
• Selected branch and period — Type: localStorage · Lifetime: Until you clear it · Why it is necessary: Keeps your selection as you move between pages.

What is held in localStorage is never sent to the server; it stays in your browser.

The mobile app

The mobile app uses no cookies. It keeps your session token, your language and theme preference and the cache needed for offline use in the device's own secure storage. The notification token is used for delivery if you have turned notifications on.

Clearing cookies

You can clear cookies and site data from your browser's settings. Doing so signs you out and returns your language and theme to their defaults — nothing else is lost; your data stays on the server.

Changes

If this policy changes — in particular if a cookie that is not strictly necessary is added — you will be told beforehand and, where required, asked for your consent separately.