Version: 1.0 · Effective: 24 October 2026 · Last updated: 24 October 2026
This policy lists every cookie and every item of browser storage (local storage) that SrvYard sets, so you can see what is on your device and why. It covers the website, the console (the app you sign in to), the documentation site and its chat widget. It is part of the Privacy Policy.
The short version
- SrvYard uses no analytics, no advertising and no tracking cookies, and no third-party trackers. We do not measure visits with a tool that sets cookies.
- What we store is either strictly necessary (to keep you signed in, to protect forms from forgery, to run the chat you opened) or a setting you chose (theme, currency, language, sidebar, a dismissed banner).
- Nothing here needs your consent under the UK rules, so there is no cookie banner. If we ever add anything that does need consent, we will ask first, with accept and reject equally easy, and update this page.
- Campaign tags such as
utm_sourcein a link are passed to the sign-up link in the address of that page only. They are not stored in a cookie or in local storage.
Legal basis
Storing information on your device, or reading it, is regulated in the UK by regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR) and in the EU by Article 5(3) of the ePrivacy Directive. Consent is not needed where the storage is strictly necessary to provide a service you have asked for. We rely on that exemption for every item below:
- Strictly necessary items keep you signed in, protect your session and our forms, and run a chat you opened.
- Functional items remember a choice you made, such as a theme, a language or a closed panel. They are written only when you use the control that sets them, so the service you asked for (a page that looks and works the way you set it) depends on them. They are never used to identify you across sites or to profile you.
Where personal data is involved, the legal basis under the UK GDPR is described in the Privacy Policy.
The website
The public website at the address you are reading.
| Name | Purpose | Provider | Duration | Type |
|---|---|---|---|---|
srvyard-session |
Session cookie. Set only on the contact page, so that the contact form can be protected from forgery and remember its error messages. | SrvYard (first party) | 2 hours | Strictly necessary |
XSRF-TOKEN |
Cross-site request forgery token for the contact form. Set with the session cookie on the contact page. | SrvYard (first party) | 2 hours | Strictly necessary |
sy-theme (local storage) |
Your choice of light or dark theme. Written only when you press the theme button. | SrvYard (first party) | Until you clear it | Functional |
sy-currency (local storage) |
The currency (£, € or $) you chose for prices on the pricing page. Written only when you press a currency button, and read to show prices in it on your next visit. Without it the currency follows the country your request comes from, and a ?currency= in the address overrides both. Never sent to us. |
SrvYard (first party) | Until you clear it | Functional |
The website sends no other cookies, and uses no session storage. The documentation chat widget is available only on our documentation site, not on the website (see The chat widget).
The console and the documentation site
The console (where you sign in) and the documentation site share these.
| Name | Purpose | Provider | Duration | Type |
|---|---|---|---|---|
srvyard-session |
Session cookie. Keeps you signed in and holds your active organisation and security state. | SrvYard (first party) | 2 hours of inactivity | Strictly necessary |
XSRF-TOKEN |
Cross-site request forgery token that protects every form and request. | SrvYard (first party) | 2 hours | Strictly necessary |
remember_web_… |
Keeps you signed in on this device after the session expires. Set only if you tick Remember me when you sign in; sign out to remove it. | SrvYard (first party) | Up to 400 days | Strictly necessary (requested by you) |
appearance (cookie and local storage) |
Your theme choice: light, dark or system. Written only when you pick a theme. | SrvYard (first party) | 1 year | Functional |
sidebar_state |
Whether the sidebar is open or collapsed. Written only when you toggle it. | SrvYard (first party) | 7 days | Functional |
locale |
The language you chose. Written only when you pick a language. | SrvYard (first party) | 5 years | Functional |
srvyard-docs-theme (local storage) |
Theme choice on the documentation site. | SrvYard (first party) | Until you clear it | Functional |
srvyard:palette:recent:<organisation> (local storage) |
The last five items you opened from the command palette, per organisation, to offer them again. Stays on your device. | SrvYard (first party) | Until you clear it | Functional |
srvyard:vulnerable-php-dismissed (local storage) |
Remembers that you dismissed the notice about vulnerable PHP versions, so it does not return until the situation changes. | SrvYard (first party) | Until you clear it | Functional |
srvyard.env-editor-mode (local storage) |
Whether you prefer the plain or the developer view in the environment editor. | SrvYard (first party) | Until you clear it | Functional |
The staff panel, which only SrvYard staff use, uses its own session and security cookies on its own address, for the same strictly necessary purposes.
The chat widget
The documentation chat (the "Ask" button) is available on our documentation site only (not on the website or in the console). It uses local storage, not cookies, for these items. Loading the widget writes nothing; the items below are written once you open the panel.
| Name | Purpose | Provider | Duration | Type |
|---|---|---|---|---|
sy_support_guest_token (local storage) |
Identifies your conversation when you chat without signing in, so it can continue if you come back. Created when you first open the panel. A random token with no personal data. | SrvYard (first party, documentation site) | Until you clear it | Strictly necessary (for the chat you started) |
sy_support_reads (local storage) |
Which chat messages you have already seen, for the unread count. | SrvYard (first party, documentation site) | Until you clear it | Functional |
sy_support_open (local storage) |
Whether the chat panel was left open. Present only while it is open. | SrvYard (first party, documentation site) | Until you close the panel or clear it | Functional |
Loading the widget may also set the documentation site's session and XSRF-TOKEN cookies described above, which it needs to answer you.
Payments
Checkout and the billing portal are pages run by Stripe, to which you are sent when you start or manage a paid plan. SrvYard does not load Stripe's scripts on its own pages and sets no Stripe cookies. On Stripe's pages, Stripe sets the cookies it needs for secure payment and fraud prevention. They are described in Stripe's cookie policy.
What we do not use
We do not use Google Analytics or any other analytics, advertising pixels, social-media plugins, session replay, A/B testing tools, or embedded third-party videos or maps, and the website loads no fonts from a third party. Links to other sites (for example to a map or to a provider's page) take you off our site, where their policies apply.
Managing storage
You can see and remove cookies and local storage in your browser's settings, and you can set it to block them. If you block the strictly necessary ones you will not be able to stay signed in or submit the contact form. Removing the functional ones resets the setting they remember. The device's own controls apply to everything above.
Changes
If we add or change a cookie, this page is updated with a new version number and date before the change goes live. If a change needed your consent, we would ask for it first.
Contact
Questions about this page: [email protected], or the contact form. More: Privacy Policy, all legal documents.