Cookie Policy

Version 2026-10-12 · Effective 12 October 2026

Source: https://smartfurnace.online/cerez-politikasi

1. What Are Cookies

Cookies are small text files stored in your browser when you visit a website. They let sites remember you and function correctly.

2. Cookies Used On This Site

This site uses the cookies listed in the table below. The session, security (CSRF) and redirect cookies are required to sign in and stay signed in, and are set as httpOnly (not accessible via JavaScript); every account type, including suppliers, uses the same session system. The language cookie remembers the language you chose.

Cookies used on this site
Name	Purpose	Duration	Type
`__Secure-authjs.session-token`	Keeps you signed in (authentication). Also valid on the site’s subdomains.	14 days after last use	Strictly necessary · httpOnly
`__Host-authjs.csrf-token`	Protects sign-in and sign-out requests against forged requests (CSRF).	Until the browser is closed	Strictly necessary · httpOnly
`__Secure-authjs.callback-url`	Remembers the page to return to after you sign in.	Until the browser is closed	Strictly necessary · httpOnly
`sf-device`	Recognises the browser your account is signed in from (a random id; it holds no personal data). If a browser not used before signs in, you are told.	1 year	Strictly necessary · httpOnly
`sf-invite`	The code of an invitation link, for the sign-up page only: when the link is opened the code is moved here from the address bar (so it is not left in the history or in a shared address). Removed when the account is created or the invitation is no longer valid.	Until used (1 day at most)	Strictly necessary · httpOnly
`sf-lang`	Remembers the language you chose; pages are prepared on the server in that language.	1 year	Preference

3. Browser Storage

In addition to cookies, some preferences and temporary data are kept in your browser’s local storage (localStorage) and session storage (sessionStorage). Unlike cookies, these entries are not sent to the server automatically with every request. They are listed in the table below.

Entries kept in browser storage
Name	Purpose	Duration	Type
`sf-lang`	The browser’s copy of the language you chose.	Until you clear it	localStorage · Preference
`tour-theme`	The light/dark appearance you chose on the Platform Tour page.	Until you clear it	localStorage · Preference
`sidebar-collapsed`	Whether the application’s sidebar is collapsed or open.	Until you clear it	localStorage · Preference
`sidebar-admin-open`	Whether the Administration section of the sidebar is open or closed (administrators only).	Until you clear it	localStorage · Preference
`sf-first-run:<user id>`	Remembers that you closed the welcome steps and the “invite your team” card, and that you have opened the 3D assembly module.	Until you clear it	localStorage · Preference
`sf-vfa-cart:<user id>`	The contents of your parts cart (parts, quantities, notes), until you send the quote request or empty the cart.	Until you clear it	localStorage · Functional
`sf-design-draft:<user id>`	The unsaved state of your VFD design or VHTPD plant, so you can restore it if the tab closes. Removed when you save, open another project or delete it; one older than 14 days is not offered.	Until you clear it	localStorage · Functional
`sf_notif_toast_shown:<user id>`	Remembers that the “you have unread notifications” reminder was already shown once for this sign-in.	Until the next sign-in	localStorage · Functional
`pendingVfdTourParams`	The values you entered in the Platform Tour demo; carried over to the design form after you register.	14 days at most	localStorage · Functional
`sf-page-tracking-session-id`	Only while you are signed in: a random per-tab identifier that groups the page visits of one tab. Not written for visitors who are not signed in.	Until the tab is closed	sessionStorage · Statistics
`sf-reset-token`	The one-time code of a password reset link, in that tab only: so the link still works when the page reloads. Removed once the password is changed or the link is no longer valid.	Until used (at the latest when the tab is closed)	sessionStorage · Strictly necessary
`sf-verify-token`	The code of an e-mail confirmation link, in that tab only: so the link still works when the page reloads. Removed once the address is confirmed or the link is no longer valid.	Until used (at the latest when the tab is closed)	sessionStorage · Strictly necessary
`sf-secure-token`	The code of the “This was not me” link of a new-device e-mail, in that tab only: so the link still works when the page reloads. Removed once used or when the link is no longer valid.	Until used (at the latest when the tab is closed)	sessionStorage · Strictly necessary
`sf-confirm-email-token`	The code of the confirmation link sent to a new e-mail address, in that tab only: so the link still works when the page reloads. Removed once the address has changed or the link is no longer valid.	Until used (at the latest when the tab is closed)	sessionStorage · Strictly necessary
`pendingVhtpdImport`	The furnace design you send to the plant planner; read and removed when the planner opens.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`pendingVfdAssistantResult`	The furnace design values prepared by the assistant; read and removed when the design form opens.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`pendingVhtpdAssistantPlan`	The plant plan values prepared by the assistant; read and removed when the plant planner opens.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`pendingVfaAssistantPart`	The part the assistant will show on the 3D model; read and removed when the assembly screen opens.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`pendingVfdOpenQuote`	Notes that "Request a quote" was chosen in the assistant; removed when the furnace design screen opens the quote window.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`pendingIncidentDraft`	The fault record draft prepared by the assistant; read and removed when the Memory Book form opens.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`pendingVhtpdLayoutFix`	The units chosen with "Fix" under the assistant's layout check; removed when the plant planner's 3D view moves them.	Until used (at the latest when the tab is closed)	sessionStorage · Functional
`sf-vacuo-chat`	Your conversation with the assistant Vacuo, in this tab only, so a page reload does not lose it; removed when the tab closes or you clear the conversation. Not saved on the server.	Until the tab is closed	sessionStorage · Functional
`pendingSupplierQuoteDraft`	The offer note the assistant drafted for a supplier; read and removed when the supplier portal's offer form opens.	Until used (at the latest when the tab is closed)	sessionStorage · Functional

4. Visit Statistics

First-party visit statistics are recorded on our own servers: the path of the page visited, the time spent on it, which of our sites (its domain) was visited and, if you came from another site, that site’s domain only (not the full address).

For visits made without signing in, no identifier is written to your device and the record carries no identifier.
When you are signed in, visit records are linked to your account.
Visit records are kept for 13 months and then deleted.
If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, that choice is respected and the visit is not recorded.

5. Cookie Types We Do Not Use

This site currently uses no third-party analytics (e.g. Google Analytics), advertising, or marketing cookies. For that reason, there is no cookie consent banner. If such cookies are added in the future, this policy will be updated and the necessary consent mechanism put in place.

6. Managing Cookies

You can manage or delete cookies and browser storage from your browser settings. However, since the session cookies are required for sign-in, disabling them will prevent you from logging into the platform.

7. Changes to This Policy

This policy may be updated from time to time; the current version is always available on this page.

8. Contact

For questions, reach us via our Contact page.