Stafflo uses a small set of strictly-necessary and functional browser storage (cookies and localStorage) to keep you signed in and remember your preferences. We do not use cookies for marketing, advertising, or cross-site tracking, and we do not run third-party analytics.
What we use
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
sb-*-auth-token |
Strictly necessary (localStorage) | Authentication session. Keeps you signed in to your workspace across page loads and visits. | Until you sign out or the session expires |
app_*, stafflo_* and similar keys |
Functional (localStorage) | Remembers UI preferences - your last-opened section and tabs, schedule view mode, list filters and layout choices - so the app opens the way you left it. | Until cleared |
What we don't use
- Marketing or advertising cookies - none.
- Third-party analytics - none. We don't share usage data with analytics, advertising, or attribution services.
- Social media trackers - none.
Managing cookies
Because everything we set is strictly necessary or functional and tied to features you actively use (sign-in, preferences), there's no consent banner - the UK PECR exemption for strictly-necessary storage applies.
You can clear browser cookies and localStorage at any time via your browser settings. Doing so will sign you out and reset UI preferences.
Third-party cookies via integrations
Some features hand you over to a third-party service under its own domain, which may set its own cookies governed by that provider's policies, not by Stafflo:
- GoCardless (
pay.gocardless.com) - when a workspace owner sets up a Direct Debit for their subscription. - Accounting and calendar connections (e.g. Xero, QuickBooks, Sage, Google) - when an administrator connects one of these services, the provider's sign-in pages set their own cookies.
Changes
We'll update this page if we add new cookies or storage. Material changes will be notified to workspace administrators by email.
Contact
Questions: privacy@stafflo.co.uk.
