This Cookie Policy explains the cookies and similar technologies used on the pellacrm.com marketing site and in the Pella CRM web application. It forms part of the Privacy Policy.
In short: our marketing site uses no advertising cookies, tracking pixels or cross-site tracking technology. The cookies we do use are limited to those strictly necessary for the site and the application to work.
1.What is a cookie?
A cookie is a small text file saved to your device through your browser when you visit a website. It lets the site recognise you, remember your preferences and keep your session alive.
Browser local storage does something similar: the data stays on your device but, unlike a cookie, is not sent to the server with every request. This policy refers to both as “cookies”.
2.Why we use cookies
We use cookies only for the purposes below.
- To keep you signed in and save you from logging in again on every page.
- To remember your language preference, so the site sends you to the right language on each visit.
- To remember your appearance preference (light or dark theme).
- To preserve your working context in the application, such as the branch and view you selected.
- To keep form submissions secure and prevent abuse.
We do not use cookies to serve advertising, build behavioural profiles or track you across sites; there is no third-party advertising or analytics script on our site.
3.Cookies on the marketing site
pellacrm.com stores the following.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| pella_locale | Strictly necessary cookie | Remembers the language you chose and returns you to it on each visit | 1 year |
| theme | Local storage | Stores your light/dark theme preference | Until you clear it |
Every asset on the site — including the fonts, the country dialling code list and the flag images — is served from our own servers, so viewing a page does not hand your IP address to a third party. The one exception is the technical error report your browser sends to our error monitoring service (Sentry, Germany) if something on the page fails; it uses no cookies.
4.Cookies in the web application
When you sign in to your workspace, the following are stored to keep your session and your interface preferences. They exist to make the service work or to remember a choice you made; none of them is used for tracking or advertising.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| pella_session | Strictly necessary cookie | Carries your session token so you do not have to sign in on every page. It cannot be read by scripts in the browser (HttpOnly) and is sent only over encrypted connections. | 30 days from last use, or until you sign out |
| pella-crm-session, XSRF-TOKEN | Strictly necessary cookie | Keeps server-side requests secure and prevents cross-site request forgery (CSRF) | 2 hours |
| locale, pella_locales, pella_default_locale | Strictly necessary cookie | Sets the application interface language and the languages enabled in the workspace | 1 year |
| sidebar_state | Functional cookie | Remembers whether the sidebar is open or closed | 7 days |
| pella_user | Local storage | Caches display details such as your name, avatar and permissions | Until you sign out |
| pella_branches, pella_active_branch_id | Local storage | Remembers the branches you can reach and the one you are working in | Until you sign out |
| pella_temp_token | Local storage | Completes the two-factor authentication flow | Until verification completes |
| pella_otp_code | Local storage | Carries the one-time code entered during a password reset to the next step; the code is invalid once used or expired | Until browser data is cleared |
| Translation cache, workspace name and icon | Local storage | Lets the interface open quickly in the right language and branding | Until you clear them |
| View preferences | Local storage | Stores screen preferences such as list or grid view | Until you clear them |
5.The mobile app
The mobile app uses no cookies. The session token is held in the operating system's secure keystore (iOS Keychain / Android Keystore) and is readable only on that device.
The app contains no third-party advertising or analytics toolkit and does not access your advertising identifier.
6.Third-party cookies
Neither our marketing site nor our application uses third-party advertising, social media or analytics cookies.
Files and images in the application are served from files.pellacrm.com over Cloudflare's network. Cloudflare may keep technical records of those requests for security and may use its own security cookies to prevent abuse; those records are not used for advertising or profiling.
Once card payment is switched on, the payment institution Stripe may use its own cookies on the subscription payment screen to prevent fraud. If an announcement carries a YouTube video, YouTube's own cookies apply when it is played. These cookies are governed by those companies' policies.
7.How to manage cookies
You can delete or block cookies in your browser settings, or ask to be warned before one is stored. The screen differs by browser but is usually under “Settings → Privacy and security → Cookies”.
Note that if you block strictly necessary cookies you will not be able to sign in, your language preference will not be remembered and parts of the application will not work.
Data held in local storage is cleared when you sign out of the application or clear your browser's site data.
8.Changes to this policy
If the cookies we use change, this page is updated and the last-updated date at the top is changed.
For questions about cookies, write to kvkk@pellacrm.com.
Questions about this document: info@pellacrm.com
Other legal documents: Privacy Policy · Terms of Service · KVKK Information Notice