Cookie Policy

How Sentsai uses cookies

Last updated: June 2025

What are cookies?

Cookies are small text files placed on your device by a website. They are widely used to make websites work correctly and to improve performance and user experience.

Cookies we use

Sentsai uses only strictly necessary cookies. These are required for the product to function and cannot be disabled without breaking the service. We do not use any analytics, advertising, tracking, or preference cookies.

Cookie nameCategoryDurationPurpose

sentsai_session_idStrictly necessary8 hoursAn opaque, cryptographically random session identifier (256 bits of entropy). The browser holds only this ID - the actual Microsoft access token and your tenant identity are stored server-side in a Redis session store. Set as HttpOnly and Secure; expires after 8 hours or on logout, whichever is sooner.

sentsai_tenant_idStrictly necessary30 daysA reference to your organization used to identify your account in the browser for UI purposes. Your identity is always re-verified against the server-side session on protected requests - this cookie alone cannot authenticate any API call. Set as HttpOnly and Secure.

oauth_stateStrictly necessary10 minutesA short-lived CSRF protection token (256-bit random value) set during the OAuth login flow and scoped to the /auth/callback path. Verified via constant-time comparison on callback, then immediately deleted. Prevents cross-site request forgery during the Microsoft authentication redirect.

Strictly necessary cookies and consent

Under GDPR and the UK PECR, cookies that are strictly necessary for a service explicitly requested by the user do not require prior consent. All cookies listed above fall into this category. You do not need to opt in or out of these cookies to use Sentsai.

If you sign out of Sentsai, the session cookies are cleared. You can also clear cookies manually through your browser settings at any time. Note that doing so will log you out.

Third-party cookies

Sentsai does not load third-party scripts, analytics platforms, or advertising networks. No third-party cookies are set by this website.

Payments are processed by Stripe. When you click through to Stripe's checkout, Stripe's own cookie policy applies to that session. We do not control Stripe's cookies.

Changes to this policy

We will update this page if we change how we use cookies. If we introduce any non-essential cookies in the future, we will ask for your consent first.

Contact

Questions about cookies or privacy? Email us at privacy@sentsai.com.