This Cookie Policy explains how ZentryxGT ("we", "our", or "us") uses cookies and similar technologies when you visit our website or use the Teamstack platform ("Platform"), including the web dashboard, optional installed (PWA) experience, and related sign-in and billing flows.
It should be read with our Privacy Policy and Terms of Use. It is written with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR) in mind.
1. What cookies and similar technologies are
Cookies are small text files stored on your device by a website. We also use similar technologies such as local storage, session storage, and (on signed-in devices) push-notification subscription data. These technologies can:
- keep you signed in
- remember a choice you made (for example theme or cookie preferences)
- help us run checkout and protect accounts
- help us understand how the Platform is used, if you allow analytics
A cookie may last only for the browsing session (a session cookie) or remain until it expires or you delete it (a persistent cookie). It may be set by us (a first-party cookie) or by another service we use (a third-party cookie).
2. How we ask for consent
When you first visit the website, we show a cookie banner. You can accept all cookies, keep essential cookies only, or open Preferences and choose whether analytics cookies are enabled.
Strictly necessary cookies do not require consent. We do not use non-essential analytics cookies unless you accept that category. You can change your choice later by clearing the stored preference in your browser (see section 6) and reloading the site so the banner appears again.
Your choice is stored in local storage on your device under keys used by Teamstack (currently teamstack-cookie-consent-mode and teamstack-cookie-analytics). That storage is not a cookie, but it performs a similar function: it remembers what you selected so we do not ask on every page load.
3. Cookies and similar technologies we use
Essential / strictly necessary
These are required for the Platform to work. You cannot switch them off in the banner because the service cannot operate without them.
- Authentication session cookies — set by our authentication provider (Supabase) so we can recognise a signed-in user, keep the session secure, and apply role-based access. Typical names follow the pattern
sb-<project-ref>-auth-token(and related auth cookies). - Security and request integrity — cookies or headers needed to complete signed-in API requests and protect accounts against unauthorised use.
- Cookie preference storage — local storage that records whether you accepted analytics, so we can honour that choice.
If you block essential cookies in your browser, you will usually be unable to sign in or stay signed in.
Functional (device preferences)
These remember choices you make in the product. They are stored mainly in local storage rather than as cookies, and they stay on your device:
- colour theme (light/dark)
- dashboard layout preferences (for example payroll column visibility)
- whether an in-app tour has been completed
- whether a product-review prompt was postponed
These preferences are not used for advertising. Clearing site data in your browser will reset them.
Analytics (optional)
The cookie banner includes an Analytics option. If you enable it, we may use cookies or similar technologies to understand how people use the marketing site and the Platform (for example pages visited, approximate time spent, and which features are used). We use that information to improve reliability and usability, not to sell advertising profiles.
If you choose Essential only, we do not enable that analytics category. You can also refuse analytics in Preferences.
Notifications (only if you enable them)
If you allow browser or mobile notifications, we store a push subscription or device token so we can deliver alerts about sessions, requests, and similar events. That is a product feature you opt into through the browser or operating system, not a marketing cookie.
4. Third-party cookies and embeds
Some features are provided by other companies. They may set their own cookies when you use that feature:
- Stripe— when you start checkout, manage a payment method, or open the billing portal. Stripe may set cookies required to complete the payment securely. See Stripe's own cookie and privacy notices.
- OpenStreetMap— when an authorised user views a map of a recorded clock-in or clock-out location. The map is loaded from OpenStreetMap and may set cookies or collect technical data under OpenStreetMap's policies.
- OpenStreetMap Nominatim — used server-side to turn an address or postcode into coordinates for proximity features. This is a network request from our servers, not a cookie on your device, but it is listed here for completeness.
- Mobile notification providers (Expo, Firebase Cloud Messaging, Apple Push Notification service) — used by the mobile app when notifications are enabled. These are app/device services rather than website cookies.
We do not control third-party cookies. Their use is governed by the third party's own policy.
5. What we use this information for
We use cookies and similar technologies to:
- keep users signed in and protect accounts
- remember interface and consent choices
- complete payments
- show maps of attendance locations to authorised Organisation users
- understand product usage, if analytics is enabled
- deliver notifications the user has allowed
We do not use cookies to sell your data or to run third-party advertising on Teamstack.
6. How to manage cookies
You can control cookies in three places:
- Our banner— choose Accept all, Essential only, or Preferences on first visit. To see the banner again, clear this site's cookies and local storage, then reload.
- Your browser — most browsers let you block or delete cookies, and clear local storage, for this site. Blocking essential cookies will break sign-in.
- Your device — location permission, notification permission, and (on mobile) push token registration are controlled in browser or OS settings, not in the cookie banner.
7. Changes
We may update this Cookie Policy when our cookies, providers, or the law change. The updated version will be published on this page with a new effective date.
8. Contact
Questions about cookies or this policy:
ZentryxGT
Email: teamstack-support@zentryxgt.com
Related documents: Privacy Policy · Terms of Use