Cookie Policy

This page explains what Epidom stores in your browser, which third-party tools can run on the site, and how you stay in control. It applies to the Epidom website and app.

Cookies are small text files that a website stores in your browser. Epidom also uses your browser's local storage, which works in a similar way. In this policy, “cookies” covers both.

In the European Union, the European Economic Area, the United Kingdom and Switzerland, a banner appears the first time you visit and lets you accept all cookies, reject all non-essential cookies, or customize them by category. Elsewhere, no banner is shown: analytics and marketing cookies are on from your first visit, and you can turn them off at any time (see below). We tell the two apart from the country of your internet connection, and when it can't be determined we show the banner. Essential cookies are always on because the site cannot work without them.

• Where the banner is shown, analytics and marketing tools only start measuring after you accept their category. Their measurement calls, which are what start collecting data and setting the provider's own cookies, are not made before that.
• Where the banner is shown, a category's tool is not loaded until you accept it: nothing is requested from Google before you accept analytics, or from Meta before you accept marketing. Their scripts are only downloaded after you accept.
• Your choice is saved in your browser's local storage, in an entry named cookie-consent-preferences. It is not a cookie. Where no banner is shown, the same entry records that both categories are on by default.
• You can change or withdraw your choice at any time, wherever you are, with the “Manage cookies” button in the footer of the Epidom website and of our presentation pages. It reopens the banner with your current choice. When you withdraw, measurement stops straight away and we delete the cookies Google Analytics and the Meta Pixel set on this site, such as _ga and _fbp. Cookies that Google or Meta hold on their own domains are covered by their own policies.

These are needed to sign you in and keep the service secure. They do not require your consent.

• better-auth.session_token (shown as __Secure-better-auth.session_token on the live site): keeps you signed in to your Epidom account. It is kept for up to 7 days.
• epidom-staff-session: keeps a staff member signed in on a shared till after entering their PIN. It expires at the next midnight in the business's time zone.
• Sign-in security cookie: a temporary cookie set while you sign in with Google, which protects the sign-in against forgery.
• epidom_consent_mode: records whether the banner must be shown where you are browsing from (opt-in) or not (opt-out), worked out from the country of your internet connection. It holds no identifier and is kept for 7 days.

These remember a choice you made or the place you were at. They are not used for advertising.

• epidom_locale_pref: remembers the language you picked with the language switcher. It is kept for 1 year.
• epidom:lastVisitedUrl, epidom:lastVisitedBackOffice, epidom:lastVisitedPos and epidom:rememberLastVisited: set only when you are signed in, so the app can bring you back to the last screen you used. They are kept for up to 400 days and cleared when you switch account.
• Local storage: cookie-consent-preferences (your cookie choice and language), locale and lang (your language) and interface preferences such as the display zoom. These stay on your device.
• epidom_sales_page: set when you open one of our presentation pages (/sales-page-1, /sales-page-2, /sales-page-3 or /sales-page-4, in any language). It holds only the name of that page and its language, no identifier, so that if you create an account we know which page you came from. It is kept for 30 days.
• epidom_source and epidom_touch: set when you open one of our presentation pages or a partner's referral link, or arrive through a link with campaign tags (utm_source and similar). epidom_source holds the name of that page or the referral code. epidom_touch holds the campaign tags, whether the visit came from an ad click (not the click's identifier), the page you landed on and the website you came from. If you create an account, we record them with it, so we know which page, partner or campaign brought you and can credit partners who refer customers. They are not shared with advertising platforms and are kept for 30 days.

These tools help us understand how the website and app are used. Where the banner is shown, they only run after you accept the analytics category; elsewhere they run by default until you turn them off.

• Google Analytics 4 (Google): measures visits, page views and clicks on key buttons. Google may set its own cookies. Cookie policy
• Google Analytics 4 also runs inside the signed-in app, not only on the public pages. There it receives the address of each page you open, which includes your store's internal identifier, and events for some actions, such as completing an onboarding step or creating a product, raw material, supplier, recipe or production batch. For a sale completed at the till, it also receives an order event: the order number, the total, the currency, and the name, price and quantity of each item sold.
• Vercel Analytics (Vercel): measures page views and visitors. Where the banner is shown, it is only loaded after you accept analytics. Privacy policy

This tool measures the results of advertising. Where the banner is shown, it only runs after you accept the marketing category; elsewhere it runs by default until you turn it off.

• Meta Pixel (Meta): lets Meta measure actions on our site, such as sign-ups, for advertising on Meta's platforms, and may be used to build audiences for those ads. Cookie policy

Some pages hand you over to a provider. These providers set their own cookies under their own policies, and we do not control them.

• Stripe: the secure payment and billing pages used for subscriptions and card payments. Cookie policy
• Google: the sign-in page, when you choose to sign in with Google. Privacy policy

To ask a question about cookies, write to us. For how we handle personal data in general, read the Privacy Policy.

• Personal data: Privacy Policy

Email: cro@prionation.io, ceo@prionation.io, consult@prionation.io

This policy changes when the tools used on the site change. The date at the top shows the last update.