Legal
Cookies and device storage
Cookies and device storage used by our website and app. Everything listed is strictly necessary or remembers a choice you made.
Version 1.0 · Effective 7 October 2026 · All legal documents
Summary
The application code we reviewed contains no advertising or analytics scripts. The list below covers both the storage our application code uses and the cookies we have observed the hosting platform setting on the live site. Everything listed is needed for features you ask for, for security, or to remember choices you make, so we do not show a cookie consent banner. Public marketing pages do not store sign-in data unless you sign in. If we find or add anything else, we will update this page and ask for consent where the law requires it.
Application storage and observed hosting cookies
| Item | Purpose | Provider | How long |
|---|---|---|---|
| Sign-in session (browser storage, key starting sb-…-auth-token) | Keeps you signed in to the app or customer portal and refreshes your session securely | Moksha One (via our platform sign-in service) | Until you sign out or clear site data |
| Bot protection cookie (__cf_bm) | Helps the hosting platform's content delivery network distinguish real visitors from bots and abuse | Cloudflare (hosting platform's CDN); purpose confirmed against Cloudflare's published documentation | 30 minutes of continuous inactivity |
| Deployment/delivery cookie (__dpl) | Observed on the live site; appears to support hosting deployment and delivery routing. This is our inference from observation, not yet confirmed by the hosting provider | Our hosting platform | Observed to expire about 24 hours after it is set; the host controls the exact expiry and we are obtaining confirmation |
| Sidebar layout (moksha-sidebar-collapsed, moksha-sidebar-open-children) | Remembers how you arranged the app's side menu | Moksha One | Until cleared |
| Notification read state (crm-notifications-read) | Remembers which in-app notifications you have read | Moksha One | Until cleared |
| App install prompt (pwa-install-dismissed) | Remembers that you dismissed the 'install app' banner | Moksha One | Until cleared |
| Supplier PO table layout (supplier-pos-column-order, supplier-pos-column-widths) | Remembers your column order and widths | Moksha One | Until cleared |
| Page reload guard (session storage, route-bundle-retry:…) | Prevents repeated reloads after an app update | Moksha One | Until the tab is closed |
| Scroll position (session storage, tsr-scroll-restoration-v1_3) | Returns you to the same place on a page when you go back | Moksha One | Until the tab is closed |
| Offline cache (service worker, moksha-one-v1) | Stores the app's own files so it loads quickly and can be installed; never stores your business data or sign-in traffic | Moksha One | Until replaced by a newer version or cleared |
The two hosting cookies are set by the platform that delivers this site, not by our application code. If you have questions about them, email hello@moksha-one.com with the subject "Cookie question" and we will raise it with the hosting provider.
Sign-in with Google or Microsoft
If you choose to sign in with Google or Microsoft, you are taken to their sign-in page, which uses its own cookies under their policies. We do not control those cookies.
Fonts and third-party content
Our fonts are served from our own website, so your browser does not request them from a third party.
Managing storage
You can clear this storage at any time in your browser settings ("clear site data"). Clearing it signs you out and resets your layout choices. If we ever introduce optional analytics or similar tools, we will ask for your permission first and give you an equally easy way to refuse.
See also our Privacy Notice.
Moksha One is a trading name of Moksha Group Limited, a company registered in England and Wales (company number 13188223), registered office 128 City Road, London, EC1V 2NX, United Kingdom. Contact: hello@moksha-one.com.