Cookie Policy
Effective date: 1 January 2026
This Cookie Policy explains how Ariyes Lda (“Ariyes”, “we”) uses cookies and similar technologies on our websites and platform (the “Service”). It should be read together with our Privacy Policy.
What are cookies?
Cookies are small text files stored on your device when you visit a website. They let a site remember your actions and preferences (such as staying signed in) across pages and visits. “Similar technologies” include browser storage such as localStorage, which works like a cookie but is read only by your own browser.
Our approach
By default, Ariyes uses only a small set of strictly necessary, first-party cookies that are required to sign you in and keep the Service secure. These cannot be switched off without breaking core functionality. On our public website we also use optional analytics cookies, but only if you agree - they are never set unless you accept them in our cookie banner. We do notuse third-party advertising cookies, and we do not sell your data to advertisers. You can change your choice at any time via the “Manage cookies” link in the footer, or control cookies through your browser (see below).
Cookies we use
| Name | Type | Purpose | Duration |
|---|---|---|---|
authjs.session-token / __Secure-authjs.session-token | Essential | Keeps you signed in to the app. | Session / until expiry |
__Host-authjs.csrf-token | Essential | Protects against cross-site request forgery (CSRF) during sign-in. | Session |
authjs.callback-url / __Secure-authjs.callback-url | Essential | Returns you to the right page after sign-in. | Session |
ariyes_tenant | Essential | Remembers your active workspace (tenant) so the app loads the right data. | Persistent |
ariyes-platform-session | Essential | Signs in platform/administrative staff (used only for internal admin access). | Session / until expiry |
ariyes-impersonation | Functional | Present only when platform staff are providing support via an audited impersonation session. | Session |
ariyes-portal-session | Essential | Signs your customers in to a help-desk customer portal. | Session / until expiry |
ariyes-portal-slug | Essential | Identifies which help-desk portal a request belongs to. | Session |
ariyes-consent | Essential | Remembers your cookie choice (accept/reject) so we don’t ask every visit. | Persistent (up to 12 months) |
The __Secure- and __Host- prefixes on production cookies indicate they are only sent over HTTPS and are restricted to our own domain for added security.
Analytics cookies (only with your consent)
On our public website, if you accept cookies, we use privacy-conscious analytics to understand how visitors find and use our pages so we can improve them. These are loaded only after you consent and are not set if you decline. They are not used inside the signed-in product.
| Provider | Purpose | More info |
|---|---|---|
| Google Analytics 4 (Google) | Aggregate traffic and usage measurement | Google’s cookie/privacy policies |
| Google Tag Manager (Google) | Loads and manages the analytics tags above | Google’s cookie/privacy policies |
| Microsoft Clarity (Microsoft) | Anonymized usage insights, heatmaps, and session trends | Microsoft’s cookie/privacy policies |
These providers are based outside the EU (in the US); where they process personal data, appropriate transfer safeguards apply (see our Privacy Policy). We use Google Consent Mode, so no analytics storage is used until you accept.
Browser storage (not a cookie)
We store your light/dark theme preference under the key theme in your browser’s localStorage. It never leaves your device, is not sent to our servers, and is used only to render your chosen appearance.
Third-party cookies
Some features rely on third-party providers (for example, Google sign-in, or payment via Stripe). When you use those features, the provider may set its own cookies on its own domain, governed by that provider’s cookie and privacy policies. We do not control third-party cookies.
Managing cookies
You control non-essential (analytics) cookies through our cookie banner - accept or reject when you first visit, and change your mind any time via “Manage cookies” in the footer. Rejecting means only strictly necessary cookies are used. You can also view, block, or delete cookies through your browser settings, though blocking strictly necessary cookies will prevent you from signing in and using the Service.
Changes and contact
We may update this Cookie Policy from time to time; the “Effective date” above reflects the latest version. Questions: [email protected], Ariyes Lda, Lisbon, Portugal (company registration no. 99102561).