This notice supplements the privacy policy. It describes technologies used by Sendiro and distinguishes application operation from tracking in emails sent by customers.
What they are and why they are used
Cookies are small values a browser stores and sends to a site. Local and session storage retain information inside the browser and work differently. Sendiro uses them to maintain access, protect operations and remember certain steps or preferences. Integrated providers may use their own technologies for their features.
Session, security and functional storage
| Technology | Purpose | Duration or criterion |
|---|---|---|
__session cookie |
Maintain the authenticated user session with the server. | Configured for up to five days; may become invalid earlier through sign-out or session revocation. |
__sendiro_csrf cookie |
Protect operations against unauthorized requests from other sites. | Session cookie, with no persistent expiry set by the application; depends on the browser’s session handling. |
emailForSignIn local storage |
Remember the email needed to complete sign-in using a link. | Until removed when completing or clearing the relevant flow or deleting site data. |
| Other access-related local storage values | Coordinate access changes between tabs. | Persist according to flow logic or until site data is deleted. |
| Interface preferences in local storage | Remember choices such as media view and the state of workspace guides or recommendations. | Until changed or site data is deleted; no automatic expiry is set. |
| Session storage for operations | Retain retry references for checkout and imports and email-test session references. | Limited to the tab’s session storage and flow cleanup; the browser may restore sessions. |
Authentication and protection cookies are configured as HttpOnly and SameSite=Lax, with Secure in production. Firebase client authentication state is held in memory; continued server access relies on the session cookie.
Firebase Analytics measurement
Optional Firebase Analytics measurement is disabled. Sendiro does not initialize that module or send sign-in, registration or page-view events through it. Authentication and features needed to provide the service use their own mechanisms, described in the table above and the privacy policy.
If we enable optional measurement, we will first explain its purpose, provider, data and duration, and provide applicable consent and withdrawal controls before it starts. Accepting the terms of service or reading this notice does not enable analytics.
Identifiers that an earlier version stored in your browser may remain until they expire or you delete site data. Disabling measurement does not retroactively erase data already received by a provider. You may ask questions or exercise your rights through the privacy contact.
Tracking in emails
Emails processed through the Amazon SES configuration may include an open-tracking pixel and tracked links. Loading the image or visiting the link may generate an event associated with the message and recipient. The provider may process technical interaction data; Sendiro records available events to inform the customer and its authorized integrations.
Email filters, bots and privacy features may load images or follow links automatically, or prevent them from loading. Metrics are indicative. The sender must explain this tracking and obtain applicable permissions; consent to cookies on the Sendiro website does not authorize tracking in its customers’ emails.
Available choices
You can configure your browser to delete site data, block storage or restrict cookies. This may sign you out, prevent access or reset preferences and operation references. Deleting a cookie does not itself erase information held on servers or cancel a subscription.
Your email application may allow remote-image blocking or tracking restrictions. To stop marketing messages, use the sender’s unsubscribe link. To exercise data rights or ask about these technologies, email support@sendiro.app or visit contact.