Cookies and Local Storage
Last updated: 8 October 2026
This document is a translation of the French original. In the event of any discrepancy, the French version prevails.
This page sets out exactly what CYSOL stores in your browser, why, and for how long. It supplements our privacy policy.
In short
We place no advertising cookies and no audience measurement trackers, and no third-party company is called when you read these pages. Our server only counts how many times each page is read, as daily totals: nothing is placed in your browser, and no IP address is kept. That is why you do not see a consent banner: there is nothing to ask you to accept.
What the public website stores
These pages — the ones you read without being signed in — set two cookies, and a third only if you change language.
| Name | Purpose | Duration |
|---|---|---|
cysol_session |
identifies your visit while you are on the website, so that forms work | the visit |
XSRF-TOKEN |
prevents another website from submitting a form on your behalf | the visit |
cysol_langue |
remembers the language you have chosen — set only if you choose one | 1 year |
The first two are essential for the website to work; the third keeps a preference you have expressed yourself. None of the three is used to track you from one website to another, and none requires your prior consent.
What the application keeps once you are signed in
The till and the back office store information in your browser. These are not cookies: this information never leaves the device and is not sent to anyone. It is what allows a device to keep taking payments when the network goes down.
| Item | Purpose | Duration |
|---|---|---|
| Sign-in token | avoid retyping your password on every page | 30 days, or until you sign out |
| Device key | link this device to your business | until you revoke the device |
| Offline catalogue | display your products and prices without a network | replaced at each connection |
| Offline sales queue | keep takings waiting to be sent: this is money, and it does not get lost | until they are transmitted |
| Offline staff recognition | let a server open their session without a network. The PIN is never stored: only a fingerprint of it is | until the browser is cleared |
| Wrong-code counter | lock the device for two minutes after five incorrect codes, even if the network is down | a few minutes |
| Display preferences | remember your screen settings, such as list or grid view | until the browser is cleared |
These items are necessary for the service. Refusing or clearing them is not prohibited: it simply disconnects the device, which will then need to be paired again. Do not do this while a sale is waiting to be sent — the till warns you when this is the case.
Payment: with Stripe, not with us
No CYSOL page loads a payment screen. When you subscribe to the Pro plan, or when you manage your subscription, you are taken to a page run by Stripe, our payment service provider, on its own domain (checkout.stripe.com, billing.stripe.com). It is there, and only there, that Stripe sets its own cookies — necessary for payment security and fraud prevention — in accordance with its cookie policy.
Until you go to these pages, Stripe receives nothing from your browser.
Nothing else is called
Our pages load no fonts, maps, videos or social network buttons hosted elsewhere. Everything your browser downloads comes from our servers, with one exception: on a computer, to print on a printer connected to it, the QZ Tray module loads its library from the jsDelivr content delivery network. The Android app never uses it. This is a deliberate choice: a file loaded from a third party, even a simple font, passes your IP address to that third party before you have accepted anything.
Clearing what is stored
Everything can be deleted from your browser, without asking us: in the settings, under “browsing data” or “site data”. Signing out is enough to remove the sign-in token.
You can still block cookies at browser level, but signing in to your account will then stop working: it is the session cookie that keeps you identified from one page to the next.
If this page changes
If we were ever to add an audience measurement tracker or a third-party tool, two things would happen together: this page would be updated, and a banner would ask for your consent before anything at all was stored. We will never put anything in place without telling you.
A question about what we store? Write to us.
Legal notice · Terms of service · Privacy policy · Refund policy · Delete your account