Cookie and browser storage policy

This page sets out what information the www.optiswift.ro website keeps in your browser (cookies and browser storage values), what it is for, how long it stays there and how you can delete it. It covers only the website, including the account area at www.optiswift.ro/cont, and does not describe the OptiSwift application installed on your computer.

The controller

The controller of the website and of the data processing described on this page, within the meaning of Regulation (EU) 2016/679 (the GDPR), is OPTISWIFT S.R.L., a limited liability company with its registered office in București, Sectorul 3, Str. Nerva Traian nr. 27-33, Scara B, Etaj 1, Birou 6, registered with the Trade Register under no. J2026055914008 (EUID ROONRC.J2026055914008), CUI (Romanian company tax ID) 55636472, with subscribed and paid-up share capital of 500 lei (the “Provider”, “we” or “us”).

For any question about cookies and browser storage, write to us at contact@optiswift.ro.

In brief

• If you only read the website, we set no cookies. We use no advertising or analytics cookies, no tracking pixels and no scripts from advertising networks or social networks.
• We set cookies only in the account area, that is, at www.optiswift.ro/cont and the pages below it (www.optiswift.ro/cont/…): one that keeps you signed in after you sign in and, if you ask for a new password, a few that tie the link you receive by email to the browser you requested it from. All of them are session cookies, which your browser deletes when you close it.
• The trial account form and the pages opened from its emails keep at most four values in tab storage (sessionStorage), and the account area, once you have signed in, one more, so that the site’s bar shows you the “My account” link. All of them disappear when you close the tab. The site does not use the browser’s local storage (localStorage).
• The site uses no analytics or visitor measurement services.
• The cookies and values above are strictly necessary for the services you request; that is why we do not ask for your consent and the site shows no cookie banner. The explanation is in the “Legal basis” section.

Cookies in the account area

All cookies in the account area have the following characteristics:

• they are set by www.optiswift.ro, and your browser sends them only to www.optiswift.ro/cont and the pages below it, not to the site’s other pages (not even www.optiswift.ro/contact);
• they are marked HttpOnly (scripts on the page cannot read them), Secure (they travel only over encrypted HTTPS connections) and SameSite=Lax (they are not sent with requests started by other sites, except when you open a link to the account area from another site or from an email);
• they are session cookies: your browser deletes them when you close it, if they have not been deleted earlier in the cases described below (a browser set to reopen previous tabs at startup may keep them after a restart);
• their content is encoded, not encrypted, and is not used for advertising or to track you on other sites.

The session cookie

• Name: sb-wcpnezrmfnfrclahqnfe-auth-token. When the session data does not fit in a single cookie, it is split across several cookies with the same name followed by .0, .1 and so on.
• When it is set: when you sign in with your account’s email address and password, or when you open the link you received for a new password.
• What it contains: the sign-in session data, including the access token, the refresh token, the expiry time and the details of the sign-in account (for example, the account’s identifier and email address). It does not contain your password.
• What it is for: it keeps you signed in from one page of the account area to the next. Without it, the account area cannot work. While your browser stays open, the session data is refreshed automatically as you use the account area.
• How long it stays: until you close your browser. It is deleted sooner when you press “Sign out”, and when, on a visit to the account area, the sign-in server no longer accepts the session. After closing your browser, sign in again with your email address and password.

The new-password cookies

• Names: sb-wcpnezrmfnfrclahqnfe-auth-token-code-verifier, sb-wcpnezrmfnfrclahqnfe-auth-token-flows-code-verifier and one sb-wcpnezrmfnfrclahqnfe-auth-token-flow-…-code-verifier cookie for each of the most recent requests, up to five, where “…” is a randomly generated identifier.
• When they are set: when you ask for a new-password link (“Forgotten your password?” on the “Sign in” page, then “Send the link”), even if you are not signed in.
• What they contain: a randomly generated verification code and the list of pending requests. They do not contain your email address or any other data about you.
• What they are for: the link you receive by email works only together with the code kept in the browser you requested it from, so that anyone who intercepted the link could not use it from another browser. For this reason, open the link in the same browser you requested it from, before you close it.
• How long they stay: until you close your browser. The cookie whose name ends in -auth-token-code-verifier is deleted sooner, when you use the link successfully, and the others when you sign out.

Tab storage (sessionStorage)

The trial account form, the pages opened from its emails and the account area use sessionStorage, an area of browser storage tied to a single tab, which is emptied when you close the tab. The values kept there serve only the step you are taking and are not used for analytics or tracking.

• optiswift.trial.draft — what you have entered in the trial form (your company details and contact details) and the step you have reached, so that you don’t lose what you have filled in if you reload the page or leave it by mistake. It is written only once you have filled something in, does not keep the consent tick, and is deleted once the form has been received.
• optiswift.trial.email — the email address sent through the form, so that the download page can tell you which address the confirmation email was sent to.
• optiswift.trial.confirm — the single-use code from the address confirmation link. The page removes it from the address bar as soon as it opens and keeps it in the tab, so that a reload does not lose it. It is deleted once the confirmation has succeeded.
• optiswift.trial.password — the single-use code from the link you use to choose your trial account’s password, kept in the same way. It is deleted once the password has been chosen.
• optiswift.cont — the value “1”, written when the first page of the account area opens after you sign in, and deleted when you reach the “Sign in” page, for example after pressing “Sign out”. While it exists, the bar at the top of the site shows “My account” in that tab instead of the “Try it now” prompt. The value contains no data about you, is not sent to the server and does not sign you in: access to the account area depends only on the session cookie.

All of them disappear when you close the tab; if your browser reopens the closed tab (for example through “Reopen closed tab” or when restoring a session), it may bring them back with it.

No analytics and no measurement

The site uses no analytics, visitor measurement or page speed measurement services: no page loads a script that collects and sends information about your device, the pages you read or the way you fill in the trial form.

Vercel Inc. (USA), the provider that hosts the site, receives, like any server, the requests your browser makes, including your IP address and the technical details of the request (for example, the browser type), so that it can send you the pages. The processing of this data is described in the Privacy policy.

Other providers’ pages and services

• Payments. When you pay for your subscription from the account area, update your card or open a payment page, your browser opens pages hosted by Stripe (checkout.stripe.com, billing.stripe.com and invoice.stripe.com). The same happens when the OptiSwift application opens an address of the form www.optiswift.ro/plata/… in your browser: the site sends you straight to the Stripe page (or, if the link has expired, to a page that tells you so), without setting any cookie. On its pages, Stripe uses its own cookies under its policies, published at stripe.com/privacy; during a 3-D Secure check, the policies of the bank that issued the card also apply. Our site loads no Stripe script, and the full card number and security code are entered only on Stripe’s pages and never reach us.
• The trial account. The trial account form and the pages opened from its emails send data directly from your browser to our accounts server (wcpnezrmfnfrclahqnfe.supabase.co), provided by Supabase, with the data stored in Ireland. For these requests your browser sends no cookies and keeps no cookies from the responses. In the account area, apart from the payment pages, your browser communicates only with our site, and the site communicates with the accounts server from its own server.
• CUI check. The CUI typed into the trial form goes from your browser to our site, which checks it on the server against the company register of ANAF, Romania’s tax authority; your browser does not connect to ANAF directly.
• Downloading the program. The installation files come from GitHub’s servers. Your browser connects to them only when you press the download button, and GitHub may use its own cookies there under its policies. The standard Windows installer downloads Microsoft’s WebView2 component during installation if it is missing from the computer; the full installer already contains it.
• Fonts and images. The site’s fonts and images are served from our own site; we use no font, map or video services from other providers.

How to control them

• The “Sign out” button immediately deletes the session cookie and any cookies left from a new-password request. Signing out ends only the session in this browser; the OptiSwift application on the practice’s computers stays connected.
• On a computer that other people also use, press “Sign out” when you have finished; otherwise the session stays open in that browser until you close it.
• In your browser’s settings you can view, delete or block the cookies and data of www.optiswift.ro at any time. If you block cookies, you can still read the site and use the trial form, but you cannot sign in to the account area or get a new password from the site. If you block browser storage, the trial form and the pages opened from its emails still work, but if you reload the page, what you typed in the form is lost and the link in the email has to be opened again.
• You can check for yourself which cookies the site uses in your browser’s developer tools (usually the F12 key, then Application → Cookies). If you have not signed in or asked for a new password since you started your browser, the list for www.optiswift.ro is empty.

Legal basis

The account area cookies and the tab storage values described above are strictly necessary for the services that you expressly request: signing in to and working in the account area, including reaching it from the site’s bar, getting a new password, filling in and sending the trial form, confirming your address and choosing your trial account’s password. The cookies are session cookies, and the tab storage values disappear with the tab. Under Article 4(6)(b) of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as amended and supplemented, consent is not required where the storage of information, or access to information already stored, in the terminal equipment is strictly necessary to provide an information society service expressly requested by the user; that is why the site shows no cookie banner.

The legal basis for the processing of personal data, the recipients, the retention periods, your rights and how you can contact the National Supervisory Authority for Personal Data Processing (ANSPDCP), Romania’s data protection authority, are described in the Privacy policy.

If we ever use cookies or other technologies for which the law requires consent, for example for analytics or advertising, we will ask for your consent before using them and will update this page first.

Changes

When we add or change a cookie, a browser storage value or a service that accesses your browser, we update this page first. The version in force is the one published here, with the date shown at the top of the page.