The short version
- This website sets no cookies and stores nothing on your device.
- Avaro Core sets only the cookies it needs to sign you in and keep you secure, plus one that remembers your theme if you choose one.
- No analytics, no advertising, no tracking, and no third-party scripts, anywhere.
1. This website
avarotechnologies.com sets no cookies and uses no local storage. It loads nothing from other companies: our fonts, images and scripts are all served from our own site, so visiting it tells no one else that you were here.
Our web host keeps standard server logs, which our Privacy Policy describes.
2. Avaro Core
These cookies are set by the Avaro Core application (avaro-core.app), not by this website.
| Cookie | What it does | How long | Type |
|---|---|---|---|
__Secure-authjs.session-token | Keeps you signed in. Without it, every page would ask for your password. | Until you sign out, or your organisation's session limit is reached | Strictly necessary |
Sign-in security cookies (authjs.csrf-token, authjs.callback-url and short-lived state cookies) | Protect the sign-in process, including when you sign in with Microsoft or Google, and return you to the right page afterwards. | The sign-in session, or minutes | Strictly necessary |
avaro_portal | Keeps a client contact signed in to the client portal, limited to the one account they were invited to. | 12 hours | Strictly necessary |
avaro_theme | Remembers light or dark mode. Set only when you use the theme switch. | One year | Set at your request |
All of these are first-party cookies. Session cookies are marked HttpOnly, so no script can read them, SameSite, so they aren't sent from other sites, and Secure, so they only travel over HTTPS.
3. Storage on your device
The Avaro Core mobile app can keep working without a signal. Time, expenses and activity you capture offline are held on your device, encrypted, until they sync. Signing out on the device destroys the key, so anything still waiting becomes unreadable, including to us. This storage exists only so the feature you're using works.
4. What we never set
No analytics cookies. No advertising or retargeting cookies. No tracking pixels, tag managers, session recorders or social media widgets.
6. Controlling cookies
You can view and delete cookies in your browser's settings. If you block Avaro Core's strictly necessary cookies, you won't be able to sign in. The ICO's guide to cookies explains more.
7. Changes
We version this policy and change the date at the top when we update it. Questions: privacy@avarotechnologies.com.