Legal
Cookie policy
Regsta uses only the cookies it needs to keep you signed in. No advertising, no tracking pixels and no cookie-based analytics.
Last updated 29 September 2026
Summary
Regsta sets only strictly necessary cookies. There are no advertising cookies, no tracking pixels and no cookie-based analytics.
Cookies
| Name | Purpose | Lifetime | Settings and category |
|---|---|---|---|
sb-<project>-auth-token | Keeps you signed in (access and refresh token). It can be split into parts ending in .0, .1 and so on. While you sign in by email, a related code-verifier cookie is set as well. | 30 days, renewed while you are active. Removed when you sign out. | HttpOnly, Secure, SameSite=Lax. Strictly necessary. |
timereg_active_tenant | Remembers which company you are working in, if you belong to more than one. | Until you close the browser. | HttpOnly, Secure, SameSite=Lax. Strictly necessary. |
A third cookie exists only for automated tests: regsta_auth_session. The production service never sets it and does not accept it.
Storage on your device
The signed-in app also stores a few items in your browser's local storage. Regsta's servers only receive what is in the offline queue, and only as your own clock actions.
| Key | Purpose | Category |
|---|---|---|
| timereg.queue.v1, timereg.queue.failed.v1 | Offline queue: clock actions made without a connection stay on the device until they can be sent. | Strictly necessary |
| regsta:nav:secondary-open | Remembers whether the extra section of the Admin sidebar is open. | Convenience. No personal data |
What Regsta does not use
- No language cookie. The language is part of the web address, for example /da for Danish.
- No session storage.
- No advertising, personalisation or cross-site tracking.
Visitor statistics
The public website, not the app, uses Vercel Web Analytics and Speed Insights. They set no cookies, store nothing on your device and report page figures in aggregate only.
Why there is no cookie banner
Consent is needed before cookies or similar technologies are used for statistics, personalisation or advertising, unless they are strictly necessary. Regsta sets none of those, so it shows no consent banner.
Whether cookieless visitor statistics fall outside the Danish consent rules is one of the questions for the legal review. If Regsta ever introduces cookies or device storage that are not strictly necessary, a consent banner comes first.