Cookie Notice

A cookie is a small item stored by a site on a device for a browser session or a defined period. Similar technology includes browser storage and SDK identifiers. This notice covers relaypbx.com, relaypbx.pl and the customer portal.

• relaypbx_identity_state protects the OIDC redirect against CSRF; HttpOnly, Secure, SameSite=Lax, up to 10 minutes;
• relaypbx_identity_session maintains an authenticated portal session; HttpOnly, Secure, SameSite=Lax, for the configured session duration;
• relaypbx_site_locale remembers language on relaypbx.com; HttpOnly, Secure, SameSite=Lax, up to 12 months;
• technical RelayPBX Identity/Keycloak cookies on auth.relaypbx.com support authentication, MFA, SSO and session security for the process or session duration.

These technologies are necessary for a requested function, security or an explicit preference. They are not advertising.

The public site measures page path, referrer domain, coarse country and device, named click target and Web Vitals. It stores no analytics cookie, raw IP, form value, communication content, replay or persistent identifier. A random tab-memory identifier is hashed separately each day and disappears on close. Do Not Track disables event transmission.

PayU, Stripe, external SSO and other linked providers apply their own technology and policy after the user opens their context or feature. RelayPBX does not place advertising pixels or social-media trackers on its public site.

Browsers can delete or block cookies. Blocking necessary cookies can prevent sign-in, MFA, session or language preference. Because RelayPBX currently uses no non-essential public-site cookie, it does not show a pretend consent for technology it does not set. Future non-essential technology will stay off until a valid choice, with equally easy rejection and withdrawal.

The list is updated before any new technology category is deployed. Questions go to privacy@relaypbx.com. Legal bases, recipients and rights are in the Privacy Notice.