Cookies & tracking
There is one cookie. It keeps you signed in. There is no analytics and no advertising tracking on this site or in the app.
The short version
One cookie, strictly necessary, no consent banner needed. We do not run Google Analytics and we do not run advertising or remarketing pixels — not on this site and not in the app. If that changes, this page changes first and you will be asked before any non-essential tag runs.
There is one third-party script, and it is not a tracker: a support widget on the office screens, described below. It sets no cookie and stores nothing in your browser.
What is actually set
| Name | Purpose | Type | Lasts |
|---|---|---|---|
| consin_session | Keeps a signed-in person signed in. Without it you would have to enter a PIN on every screen. It holds a random session token and nothing else — no name, no role, no personal information. | Strictly necessary | Until it expires or you sign out |
| consin_rail | Remembers whether you left the office menu wide or narrow. It holds one of two words and nothing else. It is a cookie rather than browser storage so the page can be drawn at the width you left it, instead of drawing it wide and snapping narrow a moment later. | Preference | A year |
The name is consin_session rather than something branded because the application's
internal name predates the Tenvar brand and renaming it would sign every user out.
A strictly necessary cookie does not require consent, because the service you asked for cannot be delivered without it. It is still described here, because "we do not need consent" is not a reason to be quiet about something.
Other browser storage
The app uses two other things on the device, and neither is a cookie or leaves the phone:
- The offline queue (IndexedDB)
- Captures made on site are written to the phone before they are sent, so nothing is lost when there is no signal. They are deleted from the device once the server has accepted them.
- A theme preference (local storage)
- Remembers whether you chose light or dark on an office machine. It is one word, and it never leaves the browser.
The support widget on the office screens
The office side of the app loads a support widget from IntelliDesk, which draws the "Help" button and the ticket form. It is not on the public pages, and not on the site manager's or driver's phone.
That includes the pages where you type something worth protecting. Signing in, signing up, and choosing a password load nothing from anybody but us — no widget, no analytics, no fonts or scripts from another company. There is nothing on those pages to see what you type.
We read the script before adding it, and this is what it does and does not do:
- It sets no cookie and writes nothing to local storage, session storage or IndexedDB.
- It sends nothing about you unless you submit a ticket. What goes then is what you typed — your name, email, subject and description — plus any screenshot you pasted in and the name of the screen you were on.
- It does ask IntelliDesk for its own settings when an office page loads, so they see that request and the address it came from even if you never open the form. That is the honest cost of having the button there at all.
- We deliberately left its "diagnostics" mode off. Switched on, it would watch for JavaScript errors across the whole app and attach the last several — along with the full page address — to every ticket. We would rather you told us what went wrong than have the page report on itself.
If we ever add advertising or analytics tags
We may at some point advertise Tenvar, which would ordinarily mean a Google Ads conversion tag or an analytics script on this marketing site. If we do, all of the following happen before it runs, not after:
- A consent banner. Under POPIA an identifier that lets a third party build a picture of a person needs consent, and consent means an actual choice — not a notice bar with an "OK" on it.
- Nothing loads until you choose. Refusing is as easy as accepting, and the site works either way.
- This page is updated first, naming every tag and what it does.
- It would only ever be on the public marketing pages. There will not be advertising tracking inside the application, where your cost data is.
How to control it
Every browser lets you see and delete cookies, and block them for a site. Blocking consin_session will stop you being able to sign in — that is the one thing it does.
Questions about any of this go to support@tenvar.co.za, and the full picture of what we hold is in the privacy policy.