Cookie Policy
Saar uses a small set of necessary cookies and browser storage to sign you in, protect requests and remember your organization and theme. We do not install advertising trackers or analytics scripts.
Necessary cookies
- Authentication session cookie: keeps you signed in and lets the server validate the session.
- CSRF token: protects sign-in and other state-changing requests.
- SSO state cookie: short-lived state, nonce and PKCE verifier during OpenID Connect sign-in.
- Organization selection cookie: remembers the active workspace.
- Stripe checkout cookies: set by Stripe during hosted checkout and billing portal sessions.
Local storage
The theme preference (auto, light or dark) is stored in local storage in your browser. It is not sent to the server.
What we do not use
Saar does not currently use advertising cookies, cross-site tracking, session recording or third-party analytics scripts. If this changes, this policy and any required consent controls will be updated before use.
Managing cookies
You can clear or block cookies in your browser. Blocking necessary cookies will prevent sign-in, organization switching or checkout from working. Because Saar uses only necessary cookies, there is no advertising consent banner.
Questions: saar-privacy@heossi.com.
Contact
Legal: saar-legal@heossi.com · Privacy: saar-privacy@heossi.com · Security: saar-security@heossi.com