1. Current position
This policy is provided by OraSpere Ltd, registered in England and Wales under company number 17481717. Its registered office is 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.
Vercel Web Analytics is not enabled. We have not installed Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag or Microsoft Clarity.
We do not display a cookie-consent banner for the current marketing pages because no non-essential marketing cookies are configured. The application uses necessary sign-in storage described below; review this position before enabling any new analytics, personalisation or advertising tools.
2. What cookies are
Cookies are small text files placed on a device when a website is visited. They can support security, preferences, analytics or advertising. Similar rules may apply to local storage, pixels and other methods that store or access information on a user’s device.
3. Current technology review
| Category | Current use | Consent status |
|---|---|---|
__Host-oraspere_session | Signed Secure HttpOnly first-party manager session cookie. It authenticates protected application requests and keeps the real workflow credential out of browser-readable storage. | Strictly necessary. Expires at the upstream session expiry, capped at up to 24 hours; if no usable upstream expiry is supplied, the application uses an 8-hour fallback. |
| Analytics cookies | Not used. Vercel Web Analytics and Google Analytics are not enabled. | Not applicable. |
| Advertising or targeting cookies | Not used. No advertising pixels or behavioural advertising tools are installed. | Not applicable. |
| Functional or preference cookies | Not currently used. | Not applicable. |
oraspere_employee_portal_session_v11 | Employee bearer session token stored in browser session storage for the current tab. The employee portal also uses oraspere_employee_portal_staff_v11 and oraspere_employee_portal_store_v11 in local storage to remember Staff ID and store context. The PIN is not saved. | Strictly necessary for employee portal operation. The bearer session normally ends with the tab/session and is cleared on sign-out; remembered Staff ID/store context persists until sign-out, cleanup or browser site-data removal. |
oraspere_client_account and manager UI state | Local storage holds limited manager account/navigation context such as email/display name, organisation, store, role and permissions. The real workflow credential is not stored there; it remains in the Secure HttpOnly cookie. | Strictly necessary for current application navigation and store context. Persists until sign-out, session cleanup or browser site-data removal. |
oraspere_clock_terminal_token, terminal metadata and pending request | An activated store clock stores a scoped terminal token, terminal label/metadata and a short-lived pending clock request record in local storage. A pending request can contain Staff ID and event type so an uncertain request can be retried safely. Employee PINs are not stored. | Strictly necessary for an activated clock terminal and duplicate-event protection. The pending request is reused only for a short retry window; terminal storage persists until terminal deactivation or browser site-data removal. |
4. External resources
The website uses fonts available on your device. The current pages do not request font files from Google Fonts.
5. Contact form
The contact form is submitted to an OraSpere same-origin Vercel API and delivered through Resend. It does not depend on analytics or advertising cookies. See our Privacy Policy.
6. Browser controls
You can use browser settings to inspect, block or delete cookies and stored website data. Clearing application session storage will sign you out. Because the current marketing pages use no non-essential cookies, no separate marketing preference control is presently provided.
7. Future changes
Before enabling a non-essential technology that requires consent, we will update this policy and implement an appropriate consent mechanism so the technology does not operate until valid consent has been obtained. We will periodically review the live website because code, hosting settings and third-party services can change.
8. Contact
Questions can be sent to admin@oraspere.com or by post to OraSpere Ltd, 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.