Cookies
In effect from 21 October 2026
9 things in all, and every one of them is ours. There is no analytics, no advertising, and no other company setting anything through this app.
Why there is nothing to accept or refuse
A choice is only worth offering where there is something to choose. Everything below either signs you in — without it there is no service to use — or remembers a choice you made yourself, such as which workspace to open or whether you narrowed the sidebar. Nothing watches what you read, and nothing is passed to anybody for their own purposes.
If that ever changes, this page changes first and you will be asked properly, with refusing as easy as agreeing.
What signs you in
Without these the app cannot do what you asked it to.
| Name | What it does | Where | How long |
|---|---|---|---|
| erp_sessionCookie | Holds the credential that proves who you are, so every page you open knows it is you. It is never readable by scripts in the page. | This app and every workspace on it | Up to 30 days, or until you sign out |
| erp_refreshCookie | Renews the credential above as it expires, so a day's work is not interrupted by being signed out every hour. | This app and every workspace on it | Up to 30 days, or until you sign out |
| erp_expires_atCookie | Says when the credential runs out, so it is renewed before a page fails rather than after. | This app and every workspace on it | Up to 30 days, or until you sign out |
| erp_actingCookie | Marks a support session in which an administrator is standing in on a workspace. It holds the record's id and nothing about anybody; the record itself is kept by us and is auditable. | The one workspace being stood in on | Until the session ends |
| signin_attemptsCookie | Counts sign-in attempts within a short window, so a sign-in that cannot complete stops rather than looping the browser. | The host you are signing in on | A few minutes |
| erp_cookie_noticeCookie | Remembers that you have read the notice about this page, so it is not shown again. | This app | One year |
What we remember for you
Set by something you did, kept so you do not have to do it again.
| Name | What it does | Where | How long |
|---|---|---|---|
| erp_workspaceCookie | Remembers which workspace to take you to when you arrive without naming one. It never decides what you may open — that is answered afresh each time. | This app | Up to 30 days |
| erp_policyCookie | Remembers which parts of the privacy policy you have accepted, and at which wording, so a part that has since changed is the one you are asked about. It holds the names of the parts and a number each; nothing about you. | This app | Two years |
| oki.railKept in your browser only | Remembers whether you narrowed the sidebar. It never leaves your browser. | This browser only | Until you clear your browser data |
Clearing them
Signing out removes what signs you in. Every browser can clear the rest from its own settings, and blocking them is your right — the app will simply ask you to sign in again each time, and forget which workspace you prefer.
The privacy page says what we hold beyond your browser, and what you can ask us to do about it.
Cookies
Everything this app keeps in your browser, listed in full.
Why you were not asked to accept
Because there is nothing here to refuse. Each one either signs you in or remembers something you chose yourself. Nothing watches what you read, and nothing goes to another company.
Cookie, or kept in your browser
A cookie is sent back to us with each page you open, which is how a page knows it is you. Something kept in your browsernever leaves it — we cannot read it at all.
Getting rid of them
Signing out clears what signs you in. Your browser’s settings clear the rest. If you block them, the app still works — it will just ask you to sign in each time and forget which workspace you prefer.