Cookie Policy
Which cookies HeyPoko sets, what each one is for, and how to refuse the ones that are not essential.
Last updated: 5 September 2026
A cookie is a small file a website stores in your browser. HeyPoko, a product of Disrex V.O.F. (KvK 92470157, Egbert Gorterstraat 6, 7607 GB Almelo, the Netherlands), uses few of them, and this page lists all of them.
What we set
Essential cookies. These keep you signed in, remember which company you are working in, protect forms against cross-site request forgery, and record your cookie choice so we stop asking. Without them the application does not work, so we set them without asking. Dutch and EU law permits this.
Analytics cookies. PostHog records which screens are opened and which buttons are pressed, so we can see where the product confuses people. We only set these if you accept them.
We set no advertising cookies, and we do not sell what these cookies record.
| Cookie | Type | Purpose | Life |
|---|---|---|---|
| Session | Essential | Keeps you signed in | Until you sign out |
| Session cache | Essential | Holds your session and active company so every page does not hit the database | 5 minutes |
| CSRF token | Essential | Blocks forged requests | Per session |
| Cookie consent | Essential | Stores your choice on this page | 1 year |
| PostHog | Analytics | Measures usage, only with consent | 1 year |
Which website you are working on is not a cookie. It sits in the address bar as a query parameter, which is why a link to a screen still points at the right site when you send it to a colleague.
Names and lifetimes can change as we build. This table is updated when they do.
What is not a cookie, but counts anyway
The law here is about anything stored on your device, not only cookies, so two more things belong on this page.
Browser storage. We keep a few small preferences in your browser's local storage rather than in a cookie: the sidebar you collapsed, the tab you were last on, a draft you had not sent. It never leaves your machine and we cannot read it from our side.
Nothing on your visitors. HeyPoko sets no cookie on the websites we publish to. The articles we write are ordinary pages on your own site, and what your visitors are asked to accept there is between you and them.
Changing your mind
Refusing analytics costs you nothing: everything in HeyPoko works either way.
You can change your choice at any time in the cookie banner. Your browser can also block or delete cookies for any site, under its privacy settings. Block the essential ones and you will not be able to sign in.
Third parties
PostHog is the only third party setting a cookie through HeyPoko, and only with your consent. Sentry, which records errors, uses no cookies.
What each of these processors receives is set out in our Privacy Policy.
When this page changes
Cookies change as the product does. We update the table above when they do, and the date at the top tells you when we last did. If we ever add a category that needs your consent, we will ask before setting it, not after.
Questions
Write to info@disrex.nl, or read the Privacy Policy for the wider picture of what we hold and why.