Cookie Policy
Short version: The Synergia360 marketing website (synergia360.app) uses only essential and privacy-preserving analytics — no advertising or third-party tracking cookies. The Platform (app.synergia360.co.uk) uses functional and security cookies required to operate your account. We do not use Google Analytics on this website.
1. What Are Cookies
Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to the owners of the site. Similar technologies — such as web beacons, pixels, and local storage — can be used for comparable purposes. References to "cookies" in this Policy include these similar technologies.
Cookies can be:
- Session cookies: Temporary and deleted when you close your browser.
- Persistent cookies: Stored on your device until they expire or you delete them.
- First-party cookies: Set directly by us (synergia360.app or app.synergia360.co.uk).
- Third-party cookies: Set by a domain other than the site you are visiting.
2. Legal Framework
Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, and UK GDPR and the Data Protection Act 2018. PECR requires us to obtain your consent before placing any non-essential cookies on your device, and to provide clear information about the cookies we use. The ICO has published guidance on cookies that we follow.
3. Our Approach
We have designed our marketing website and Platform to minimise the use of cookies. Specifically:
- We use Plausible Analytics for website analytics — a cookieless, privacy-preserving tool that does not set any cookies and does not collect personal data or IP addresses.
- We do not use Google Analytics, Facebook Pixel, or other behavioural advertising networks on the marketing website.
- Essential and functional cookies used by the Platform are strictly necessary to provide the service.
4. Essential Cookies
These cookies are strictly necessary to provide you with the core functionality of the website and Platform. They cannot be disabled without breaking the service. No consent is required for these cookies under PECR.
| Cookie name | Domain | Purpose | Duration | Type |
|---|---|---|---|---|
__Host-csrf | app.synergia360.co.uk | Cross-site request forgery (CSRF) token. Protects form submissions and state-changing API calls. | Session | First-party |
syn_session | app.synergia360.co.uk | Maintains authenticated session state. Required to keep you logged in. | Session / up to 30 days (if "remember me" selected) | First-party |
syn_refresh | app.synergia360.co.uk | Secure HTTP-only refresh token for JWT rotation. Keeps your session active without re-authentication. | 30 days (rotating) | First-party (HttpOnly, Secure) |
syn_company | app.synergia360.co.uk | Stores the ID of the currently active workspace for users with access to multiple companies. | Session | First-party |
5. Functional Cookies
These cookies remember choices you make to improve your experience — for example, your preferred language, table column visibility settings, and collapsed/expanded navigation state. They do not collect data used for advertising.
| Cookie name | Domain | Purpose | Duration | Type |
|---|---|---|---|---|
syn_ui_prefs | app.synergia360.co.uk | Stores UI preferences such as sidebar state, table column visibility, and density setting. | 1 year | First-party |
syn_locale | synergia360.app | Remembers the language preference selected on the marketing website (en-GB or ur-PK). | 1 year | First-party |
6. Analytics
We use Plausible Analytics (plausible.io) to understand aggregate traffic patterns on our marketing website. Plausible is a cookieless analytics tool that:
- Sets no cookies and no persistent identifiers;
- Does not collect, store, or process personal data or IP addresses;
- Does not use cross-site tracking or fingerprinting;
- Is hosted in the European Union (Germany) and is compliant with UK GDPR, PECR, and ePrivacy Directive by design.
Because Plausible is cookieless and collects no personal data, it does not require your consent under PECR.
The Platform (app.synergia360.co.uk) uses Azure Application Insights for operational monitoring and performance analytics. This collects anonymous performance metrics and error telemetry from the application. No personally identifiable information is included in telemetry payloads by design.
| Technology | Domain | Cookies set | Personal data | Purpose |
|---|---|---|---|---|
| Plausible Analytics | synergia360.app | None | None | Aggregate page views and referrer data |
| Azure Application Insights | app.synergia360.co.uk | ai_session, ai_user | Anonymous (session and user are random GUIDs) | Platform performance and error monitoring |
The Azure Application Insights cookies (ai_session and ai_user) contain only random GUIDs with no connection to your account or personal data. They are used solely to correlate error telemetry within a session and across page views for debugging purposes. ai_session expires after 30 minutes of inactivity; ai_user expires after 1 year.
7. Marketing and Advertising Cookies
We currently do not use any marketing or advertising cookies on synergia360.app. We do not run retargeting campaigns via Facebook Pixel, Google Ads, LinkedIn Insight Tag, or any other advertising network that sets cookies on our website.
If this changes in the future, we will update this Policy, display an appropriate consent banner, and obtain your explicit consent before setting any marketing cookies.
8. Cookies Used in the Platform
When you are logged in to the Synergia360 Platform at app.synergia360.co.uk, a small number of cookies are used to maintain your session and preferences. These are listed in sections 4 and 5 above. All Platform cookies are:
- First-party (set by app.synergia360.co.uk only);
- Sent over HTTPS only (Secure flag);
- Where they carry authentication tokens: marked HttpOnly to prevent JavaScript access;
- Scoped to the Platform domain with the SameSite=Lax or SameSite=Strict attribute to mitigate CSRF.
9. Third-Party Scripts and Embeds
The marketing website loads the following third-party resources that may set cookies or local storage entries:
- Google Fonts — We load Inter and Noto Nastaliq Urdu via fonts.googleapis.com. Google Fonts does not set cookies on font requests; however, your IP address is sent to Google's servers as a standard HTTP request. We are evaluating self-hosting these fonts to eliminate this transfer.
- Font Awesome CDN (cdnjs.cloudflare.com) — Icon fonts loaded via Cloudflare's CDN. Cloudflare may log access requests, which include your IP address, for operational and security purposes. No cookies are set by this request.
We do not embed social media widgets, YouTube videos, or third-party chat tools on the marketing website that would set their own cookies without your knowledge.
10. Managing Your Cookie Preferences
10.1 Browser settings
You can control and delete cookies through your browser settings. Most browsers allow you to:
- See what cookies are stored and delete them individually or in bulk;
- Block third-party cookies;
- Block cookies from specific sites;
- Block all cookies (note: this will break the authenticated Platform);
- Delete all cookies when you close your browser.
For guidance on managing cookies in your specific browser, visit:
10.2 Opting out of analytics
Because we use Plausible Analytics — which sets no cookies and collects no personal data — there is nothing to opt out of for marketing website analytics.
To opt out of Azure Application Insights telemetry in the Platform, you may disable JavaScript in your browser settings, though this will prevent the Platform from functioning correctly.
10.3 Essential cookies
Essential cookies (listed in section 4) cannot be disabled while using the Platform. If you disable them via browser settings, you will not be able to log in or use the Platform.
10.4 Do Not Track
The "Do Not Track" (DNT) signal is a browser setting. We honour DNT signals where feasible. Since we do not use behavioural advertising or cross-site tracking, our current cookie use is already aligned with the intent of DNT.
11. Changes to This Policy
We may update this Cookie Policy from time to time, for example if we introduce new cookies or change our analytics tools. We will update the "Last updated" date at the top of this page. For material changes, we will notify registered users by email or display an updated consent banner where required.
12. Contact
If you have questions about our use of cookies, please contact us:
Synergia360 Ltd · Registered in England and Wales, Company No. 13495021
Email: legal@synergia360.app
You may also contact the Information Commissioner's Office (ICO) at ico.org.uk if you have a complaint about our cookie practices.