Cookies and local storage

Zentra session cookies are secure, restricted to the domain used and inaccessible to the page’s JavaScript (HttpOnly). They enable sign-in and protect the account.

• Access: token validity, capped at 7 days.
• Session renewal: up to 30 days, renewed when the connection is refreshed.
• Account confirmation or recovery: PKCE verifier and return path retained for 10 minutes.
• Linking a payment to the licence: up to 365 days.

Cloudflare, which hosts the website, may set security cookies. The Stripe payment page also uses its provider’s mechanisms.

When you choose a language on the site, a preference cookie remembers it for one year. It is used for nothing else.

The application stores language, appearance, tutorial status and drafts locally. The database and offline document copies are not simply cookies. Back up unsynchronised changes before clearing application data.

Client portal pages (quotes, invoices and bookings) set no cookies. A deposit is paid on Payrexx’s page, which uses its own mechanisms.

The Zentra website code currently includes neither an advertising pixel nor an optional audience measurement tool. No advertising consent is required to create an account. This does not exclude providers’ technical security logs. If an optional tool is added, the necessary information and choices will be presented before activation.

You can sign out and then delete the domain’s cookies in your browser. Blocking them may prevent you from signing in. Deleting them does not cancel your subscription or erase hosted data.

For requests about hosted data, see the privacy policy.