Cookie policy
Last updated 3 October 2026
This site sets two small cookies, both strictly necessary: one makes signing in work, the other remembers that you have seen our cookie notice.
A short notice, once. Under UK law, consent is needed only for cookies that are not strictly necessary — advertising, analytics, tracking. We use none of those, so the first time you visit a small notice tells you the essentials are on, then hides itself. You will not see it again. Cookie settings opens the switches at any time.
What a cookie is
A small file a website asks your browser to keep and hand back on the next request, so the server can recognise the same visitor. Related technologies — localStorage, for instance — keep data in your browser without sending it anywhere at all.
The cookies we set
Strictly necessary. A session identifier. It is what lets you stay signed in to the portal as you move between pages, and it carries the anti-forgery token that protects every form on the site from being submitted by another website on your behalf.
It contains a random identifier and nothing else — no name, no email, no browsing history. It is HttpOnly (script on the page cannot read it), Secure (it is never sent over plain HTTP) and SameSite=Lax (it is not sent on cross-site requests).
Set by: vesopasoftware.com Expires: 14 days, refreshed while you are active Third party: no
Strictly necessary. Remembers your cookie choice so the notice is shown only once. It holds a version number, two on/off switches (analytics and marketing, both off unless you turn them on) and the date you chose — nothing about who you are.
It is shared by the Vesopa sites under one domain, so making the choice on one of them covers the others. vesopaepos.com, vesopasoftware.com and vesopa.com are separate domains, and browsers keep each one's cookies to itself, so each remembers on its own.
Set by: vesopasoftware.com Expires: 12 months Third party: no
That is the complete list. There is not a third row below it.
Stored in your browser, not sent to us
A copy of your cookie choice in localStorage, so it survives if the cookie is cleared. It is never transmitted anywhere.
If you resize the Vesopa AI panel, your browser remembers the size you left it at so it opens the same way next time. It lives in localStorage, it holds two numbers, and it is never transmitted to our server or to anybody else. Clearing your site data removes it.
Third-party requests
Two things on our pages are fetched from other people's servers, and although neither sets a cookie, both mean your browser makes a request those companies can see:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — the typefaces. Google receives your IP address and user-agent as part of any such request. - Microsoft Store badge — on product pages, the official "Get it from Microsoft Store" badge is loaded from Microsoft.
We use no analytics, no advertising networks, no social media pixels, no session recording and no cross-site tracking of any kind.
Controlling cookies
Every browser lets you see, block and delete cookies — usually under Settings › Privacy. You are free to block ours. Be aware that blocking vesopa.sid makes signing in to the portal impossible, because the browser will no longer be able to prove between one page and the next that it is the same person.
Blocking it does not affect reading this website. Nothing public here needs it.
Changes
If we ever add a cookie that is not strictly necessary, it will stay off until you switch it on in Cookie settings, and this page will be updated first. Questions to support@vesopasoftware.com.