Cookies
No cookie is set on the public website. The delivery tracking page, which a recipient opens from the link the business sent them, likewise sets no cookies and stores nothing on their device. The following are set only when you sign in to the application:
| Name | Purpose | Duration |
|---|---|---|
| __Secure-authjs.session-token | Keeps you signed in after login. Without it a password would be needed on every page. | Up to 7 days from sign-in (it survives closing the browser) or until you sign out; revoked when you change your password |
| __Host-authjs.csrf-token, __Secure-authjs.callback-url | Protects the sign-in form against forged requests (CSRF) and returns you to the page you asked for. | Session (deleted when the browser closes) |
Device storage (localStorage, sessionStorage, IndexedDB, cache)
The driver app also works offline. To do so it stores locally on the device:
| What | Purpose | When it is deleted |
|---|---|---|
| Pending deliveries (IndexedDB “prodel”) | Deliveries, photos and cash records made without signal, until they are sent. | As soon as they are synchronised with the server |
| Application pages and files (service worker cache) | So the stop list opens without a network. | On sign-out, and when the application version changes |
| List of pre-loaded stop pages (sessionStorage) | So the same route pages are not fetched again within the same tab. | When the tab or browser closes |
| Navigation app preference (localStorage) | So the “Navigate” button opens the app you chose (Waze, Google Maps or Apple Maps). | Written only when you choose an app under “Account”; stays until you clear browser data |
| “Sunlight mode” preference (localStorage) | Remembers the contrast setting you chose. | Written only when you press the toggle; stays until you clear browser data (toggling changes its value) |
This data stays on your device and is not transferred to third parties. Map tiles are loaded from OpenStreetMap, as described in the Privacy Policy.