Legal
Cookie Policy
This Cookie Policy explains how CERTIRON uses cookies and similar browser-storage technologies on certiron.io and the dashboard at dashboard.certiron.io.
Short version. We use functional storage only — to keep you signed in and to remember that you have acknowledged this policy — plus cookieless, privacy-respecting visit counting (Plausible). No tracking cookies. No advertising. No third-party cookies. No personal data in analytics.
1. What we store
CERTIRON uses only the following:
a) Session token — dashboard only
When you sign in to the dashboard, a random opaque session token is stored in your browser's localStorage (key: certiron.session). This keeps you signed in for up to 30 days. It is sent with every API request in the Authorization header. Without it you cannot use the dashboard.
Legal basis: strictly necessary for the service you requested (Art. 5(3) ePrivacy Directive — exemption for strictly necessary cookies).
b) Cookie-notice acknowledgement — marketing site
When you click "Got it" on the cookie banner, we store a tiny flag in localStorage (key: certiron.cookies_ack) so the banner does not reappear on every page load.
c) Language preference — all pages
When you choose a language (or we detect it from your browser), we store your choice in your browser's localStorage (key: certiron.lang) so the site loads in your preferred language. Functional only.
2. Analytics — cookieless, no personal data
Since August 2026 we use Plausible Analytics to count page visits. Plausible is a privacy-respecting, EU-based tool that works without cookies, stores no personal data, does no cross-site tracking and builds no visitor profiles. Because it sets nothing on your device and processes no personal data, it does not require consent under the ePrivacy rules — but we name it here because you deserve to know exactly what runs on this site.
2b. What we do NOT use
- No Google Analytics, Fathom, or any cookie-based analytics
- No Facebook Pixel, Google Ads, or any advertising tracker
- No cross-site tracking cookies
- No session replay or heatmap tools
- No fingerprinting
3. Third-party services
Stripe may set its own cookies on the Stripe-hosted checkout page for fraud prevention and payment processing. See Stripe's own Cookie Policy. We do not embed Stripe elements on our own pages.
4. How to remove the stored data
You can clear our storage at any time:
- Browser menu → Settings → Privacy → Clear site data for certiron.io / dashboard.certiron.io
- Or: open the dashboard → Logout (this removes the session token and invalidates it on the server)
Removing the session token will simply sign you out. The site and dashboard will continue to work without any cookies at all.
5. Changes
If we change our use of cookies or add anything that stores data on your device or processes personal data, we will update this page first — and where consent is legally required, we will ask for it before it runs. Cookieless, personal-data-free tools (like the analytics above) are announced on this page.
6. Contact
Questions? privacy@certiron.io