Cookie Notice
Version 2026-09-09 · In effect from 9 September 2026
DepotIQ sets only cookies that are strictly necessary to sign you in and keep the session secure. There is no analytics, advertising or third-party tracking anywhere in the platform.
1.Why you are not asked for consent
Under the ePrivacy Regulations, consent is required for cookies that are not strictly necessary to deliver a service the user has asked for. Every cookie DepotIQ sets is necessary for authentication or security, so no consent banner is shown. If that ever changes, a consent mechanism will be added before the cookie is set.
2.Cookies we set
| Cookie | Purpose | Expires |
|---|---|---|
| authjs.session-token (__Secure- prefixed in production) | Keeps you signed in. Contains a signed token identifying your account; the role and depot are re-checked against the database on every request. | 12 hours |
| authjs.csrf-token | Cross-site request forgery protection on sign-in and sign-out. | Session |
| authjs.callback-url | Remembers where to send you after sign-in. | Session |
| depotiq-admin-depot | Records which depot a master admin has opened from the platform console. Only set for master admins. | Session |
| depotiq-admin-role | Records which role a master admin is standing in while viewing a depot, so the platform restricts them exactly as it would that role. Only set for master admins. | Session |
All cookies are set with HttpOnly, SameSite=Lax and, in production, the Secure flag, so they cannot be read by scripts or sent over an unencrypted connection.
3.Other storage on your device
Two small pieces of information are kept by your browser rather than in a cookie. Neither is sent to our servers, neither contains personal data, and both are cleared by clearing your browsing data.
| Stored item | Purpose | Cleared |
|---|---|---|
| depotiq:nav:open (local storage) | Remembers which sections of the left-hand menu you left open. | When you clear site data |
| depotiq:trail (session storage) | Remembers the pages you came through so the Back link on a page returns you the way you arrived. | When you close the tab |
4.Third-party cookies
None are set by DepotIQ. If you choose to sign in with Google, Google sets its own cookies on its own domain during that sign-in - that is governed by Google's privacy policy, not this one.
DepotIQ uses Sentry to report application errors so faults can be fixed. It sets no cookies, records no session replay, and is configured to strip cookies, request bodies and IP addresses from every report before it is sent. It is listed as a subprocessor in the Privacy Policy.
5.Managing cookies
You can block or delete cookies in your browser settings, but DepotIQ cannot sign you in without the session cookie, so the platform will not work if you block it.
Contacting us
Oxus Technologies Limited, registered in Ireland, company number 818468.
Registered address: Greenhills Road, Walkinstown, Dublin 12, D12 DX80
Privacy and data protection enquiries: info@oxus.ie
General support: info@oxus.ie
Web: https://oxus.ie
See also the full set of DepotIQ legal documents.