Cookie Policy
Summary
Cookies and similar technologies we use, with categories and controls.
1. Introduction
The Qoro platform uses cookies and similar technologies (localStorage, sessionStorage) for core functionality and — with your consent — for performance and analytics purposes. This policy lists each cookie we use, its purpose, retention and how to manage consent. You can update your preferences at any time from the Managing Consent section below.
2. What are Cookies?
Cookies are small text files that websites store in your browser. Some are strictly necessary for the Service (session, security); others are used for analytics or marketing. localStorage and sessionStorage serve similar functions to cookies and are treated in the same legal category.
3. Categories
- Necessary: Required for core platform functionality (session, CSRF, bot defence, payment functionality). No consent required — covered by legitimate interest and contract performance.
- Analytics: Used to understand platform usage and to monitor errors (e.g. error-tracking tool). Explicit consent required.
- Marketing: Used for relevant offers and performance measurement. Explicit consent required. Currently no cookies are loaded in this category; the category is kept as a placeholder.
4. Cookies We Use
4.1 Necessary
| Name | Provider | Purpose | Retention |
|---|---|---|---|
| sb-* | Supabase (auth) | Authentication session cookies. Required for the user to stay signed in. | Session + 7 days |
| qoro_cookie_consent | Qoro | Stores your cookie consent choices so the banner does not reappear and your analytics/marketing state is remembered. | 12 months |
| cf-turnstile-* | Cloudflare Turnstile | Bot defence. Protects sign-up and sign-in forms from automated attacks. | Page session |
| __Host-next-auth.* | Qoro | CSRF and session security — technical cookies that prevent cross-site abuse. | Session |
| __stripe_mid / __stripe_sid | Payment processor | Payment functionality and fraud prevention. Only active during the payment step. | 1 year (mid) / 30 min (sid) |
4.2 Analytics
| Name | Provider | Purpose | Retention |
|---|---|---|---|
| sentry-trace / baggage | Error monitoring | Error and performance monitoring. Loaded only when analytics consent is granted. | Per request |
4.3 Marketing
No cookies in this category.
5. Managing Consent
You can change your consent preferences at any time. Use the button below to reopen the cookie banner:
You can also disable cookies entirely in your browser settings; however, features that require necessary cookies (sign-in, placing orders, payment) will not work.
Your consent choices are stored under the qoro_cookie_consent key in your browser's localStorage. Deleting this key resets all preferences and re-displays the banner.
6. Legal Basis
- Necessary cookies: KVKK Art. 5/2-c (contract performance) and Art. 5/2-f (legitimate interest) / GDPR Art. 6(1)(b) + 6(1)(f).
- Analytics and marketing cookies: KVKK Art. 5/1 (explicit consent) / GDPR Art. 6(1)(a) + ePrivacy Directive Art. 5(3).
7. Contact
For questions about cookies: hello@qoro.cc.