Cookies and similar technologies
What this website, the LinkSync web admin, the LinkSync console and the LinkSync app keep on your device, and why. The short answer: only what is needed to keep you signed in, keep your clock-ins safe until they are sent, and remember a couple of display choices. Nothing is used for tracking or advertising.
Last updated [date]
In short
- This website (linksync.co.uk) uses no cookies, no analytics and no tracking. It remembers only whether you chose light or dark mode.
- The web admin keeps you signed in, tells you why if you were signed out, remembers whether you prefer light or dark mode and whether the side menu is open, and keeps its own files (no personal information) so it opens faster.
- The LinkSync console, used only by LinkSync staff, keeps you signed in and remembers the same choices.
- The app keeps you signed in, keeps your phone’s security key, holds clock-ins and your route until they are sent, and sets your tap-out reminders, all on your phone.
- We use no advertising, analytics or social media cookies, and no tracking pixels, anywhere.
- Because we only use what is strictly necessary, or what remembers a choice you made, we don’t need to ask for consent, so you won’t see a cookie banner.
1. What cookies and similar technologies are
A cookie is a small file a website saves in your browser, so it can remember something the next time you visit a page. “Similar technologies” means other ways of storing or reading information on your device, such as a browser’s local storage, or the secure storage an app uses on your phone. The law treats them all the same way, so this notice covers them all.
2. This website
linksync.co.uk, including this page, sets no cookies. It uses no analytics, no tracking and no third-party content. If you choose light or dark mode, it remembers that choice in your browser:
| Name | Type | What it does | How long | Category |
|---|---|---|---|---|
| linksync.site.theme | Browser local storage | Remembers whether you chose light mode, dark mode, or to follow your device. | Until you clear it | Remembers your choice |
Our hosting keeps short-lived technical logs (such as the address a request came from) to keep the site running and secure; see our privacy notice.
3. The web admin
The web admin is the LinkSync website that managers and other authorised people sign in to. It uses:
| Name | Type | What it does | How long | Category |
|---|---|---|---|---|
| linksync.admin.session | Browser session storage (this tab only) | Keeps you signed in while the tab is open, and remembers which organisation you are looking at. | Until you sign out or close the tab | Strictly necessary |
| linksync.admin.signed-out | Browser session storage (this tab only) | If you are signed out without choosing to, for example because your sign-in ran out, remembers why, so the sign-in page can tell you. | Until the sign-in page has shown it, or you close the tab | Strictly necessary |
| linksync.theme | Browser local storage | Remembers whether you chose light mode, dark mode, or to follow your device. | Until you clear it | Remembers your choice |
| linksync-shell-static and linksync-shell-pages, kept by a small helper the web admin installs in your browser (sw.js) | Browser file storage | Keeps the web admin’s own files (its pages, code, fonts and icons) so it opens faster and still opens on a weak connection. It holds no personal information: nothing about you, your organisation or the people you support is kept, and nothing LinkSync sends after you sign in. | Until you sign out, or a newer version of the web admin replaces them. Closing the tab without signing out leaves them, which is safe because they hold nothing personal. | Strictly necessary |
| sidebar_state | Cookie, set by LinkSync | Remembers whether you left the side menu open or closed. | 7 days | Remembers your choice |
[Before launch, the sign-in session moves to a cookie that scripts on the page can’t read, sent only over secure connections and only to LinkSync, and nothing about your sign-in is kept in browser storage. Update this table with its name and how long it lasts when that happens.]
None of these contain personal information about you beyond what is needed to keep you signed in, and none are shared with anyone else.
4. The LinkSync console
The console is where LinkSync staff set up and support organisations. Only LinkSync staff can sign in to it. It keeps three of the same things as the web admin: the sign-in session for this tab (linksync.console.session, until you sign out or close the tab, strictly necessary), your light or dark mode choice (linksync.theme, until you clear it) and whether the side menu is open (sidebar_state, 7 days). [The sign-in session moves to a secure cookie before launch, as for the web admin.]
5. The app
The LinkSync app keeps the following on your phone:
| Name | Where | What it does | How long |
|---|---|---|---|
| linksync.session | Phone’s secure storage | Your sign-in session, so you don’t have to sign in every time you open the app. | Until you sign out, your access ends, or you remove the app |
| linksync.key.tap and linksync.key.session (with the app’s name in front) | Phone’s secure key store | Your phone’s security keys. One proves each tap came from your registered phone; the other ties your sign-in to it. They are created on your phone and can’t be copied off it. | Until your phone is changed, your access ends, or you remove the app |
| linksync.dataOwner | Phone’s secure storage | Who the taps and route saved on this phone belong to. If someone else signs in on the phone, those are deleted first. It holds a reference, not your name or email. | Until you sign out, or you remove the app |
| linksync.appattest (with the app’s name in front, iPhone only) | Phone’s secure storage | A reference your phone uses to prove the app is the genuine LinkSync app. It holds nothing about you. | Until your phone is changed, or you remove the app |
| linksync-offline.db | An encrypted file in the app | Taps you made with no signal, and visits you started with no signal, so they can be sent when you are back online. | Until sent. A tap sent more than 24 hours late is flagged for a manager to check. |
| linksync.lastSentAt | Phone’s secure storage | When a tap saved on your phone last reached LinkSync, so the app can show “All sent” and when. It holds only a time. | Until you sign out, or you remove the app |
| linksync.offlineQueueKey | Phone’s secure storage | The key that locks the file above, so only the app can read it. It is made on your phone and never leaves it. | Until you remove the app |
| linksync.presence.track | App storage on your phone | While you are clocked in, the positions your phone records, held until they are sent. | Until sent, usually within a minute |
| linksync.presence.departures | App storage on your phone | The time your phone noticed you left a visit, held until it is sent. | Until sent, usually within a minute |
| linksync.presence.watch (iPhone only) | App storage on your phone | While you are clocked in, where the GeoSync is and how far away counts as leaving, so the phone can notice when you leave. | Until you tap out or the visit ends |
| linksync.watchingVisit | Phone’s secure storage | While you are clocked in, which visit the phone is watching for you leaving, so it can carry on if the app restarts. | Until you tap out or the visit ends |
| linksync.presenceSettings | Phone’s secure storage | How often to record your position and how to notice you leaving, as LinkSync last told the app. Used if you clock in with no signal. It holds nothing about you or where you have been. | Replaced at each clock-in with signal, until you remove the app |
| linksync.timeAnchor (one for each organisation) and linksync.timeAnchors | Phone’s secure storage | The time LinkSync last gave your phone, so a tap made without signal still has a trustworthy time. | Replaced each time you are online; removed when you sign out |
| Tap-out reminders | Set on your phone | A reminder for when a visit is due to end, and a notice while you are clocked in. They are set on your phone and nothing is sent to LinkSync. | Until the visit ends or the reminder shows |
The app contains no advertising identifiers, analytics or tracking tools, and LinkSync doesn’t send notifications to your phone from its servers. [Confirm before publishing: no crash-reporting or analytics tools are included in the app, or list them here.]
The app reads your phone’s location only while you are clocked in, and some other readings only at the moment you tap. Our privacy notice explains this in full.
6. Maps in the web admin
Some web admin pages show a map, such as a place or a visit route. The map images are loaded from our maps provider (see Sub-processors), which, like any website, receives your device’s internet address and the part of the map being shown in order to send the images. It does not set cookies or store anything on your device. [Confirm before publishing.]
7. What we never use
- Advertising or marketing cookies.
- Analytics or measurement cookies.
- Social media cookies, plug-ins or tracking pixels.
- Fingerprinting, or any other way of recognising your device across websites.
If we ever wanted to use anything that isn’t strictly necessary, we would update this notice first and ask for your consent before setting it.
8. Why we don’t ask for consent
UK law (the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025) says websites and apps must ask before storing or reading information on your device, unless it is strictly necessary for a service you have asked for, or falls within another exemption, such as remembering how you have chosen to set up the way a service looks or works. Everything we use falls within these exemptions. [Solicitor to confirm that the display preferences fall within the exemption.]
9. How to control them
- You can delete cookies and site data in your browser settings at any time. If you delete the sign-in session you will be signed out. If you delete the display preferences, the website or web admin goes back to its defaults. If you delete the web admin’s files, it downloads them again next time.
- You can block cookies in your browser, but you won’t be able to sign in to the web admin.
- Signing out of the app removes your sign-in session. Removing the app deletes everything it keeps on your phone, including the security key, so you will need your manager to approve a phone change before you can use LinkSync on that phone again. [Confirm before publishing: on iPhone, what the app keeps in the phone’s secure storage can stay after the app is removed, until the phone is reset.]
10. Changes and contact
We will update this notice if anything we store on your device changes. The date at the top shows the latest version. Questions: privacy@linksync.co.uk.