01What this policy covers
This Cookie Policy explains how Nead, LLC (d/b/a DEV.co) uses cookies and similar technologies on the erp.io website. It supplements our Privacy Policy, which governs personal information generally.
“Cookies” are small text files a site stores on your device. Similar technologies include local storage, session storage, and pixels. We use cookies and local storage; we do not use tracking pixels or web beacons on this site.
1.1 The authenticated application
This policy covers the public marketing website. The authenticated erp.io application sets additional strictly necessary cookies for session management, described in the application and governed by the customer agreement.
02Every item we set
This is the complete list. If you find something on this site not listed here, tell us at [email protected] — it is either an error or an omission and we will correct it.
2.1 Strictly necessary
| Name | Type | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cookie, first-party | Cloudflare bot management. Distinguishes automated traffic from human visitors to protect the site. | 30 minutes |
cf_clearance | Cookie, first-party | Set only if you complete a challenge, so you are not repeatedly challenged. | 30 minutes |
__Host-rl | Cookie, first-party | Rate limiting on form submission, preventing automated abuse of the lead form. | Session |
These cannot be disabled without breaking the site. They do not track you across sites and are not used for advertising or analytics. Under the ePrivacy Directive and comparable law they are exempt from consent because they are strictly necessary to deliver a service you requested.
2.2 Preference
| Name | Type | Purpose | Duration |
|---|---|---|---|
erpio-theme | Local storage, not a cookie | Remembers your light or dark theme choice. | Until you clear browser storage |
This is stored in your browser and never transmitted to our servers. It contains a single value: light or dark. It is not an identifier and cannot be used to recognise you.
2.3 Analytics
| Name | Type | Purpose | Duration |
|---|---|---|---|
_pa_id | Cookie, first-party | Distinguishes visitors so we can count unique visits rather than page loads. | 13 months |
_pa_ses | Cookie, first-party | Groups page views into a single visit. | 30 minutes |
Analytics are configured to limit identifying detail:
- IP addresses are truncated before storage and never retained in full;
- no cross-site tracking, no advertising identifiers, and no data sharing with advertising networks;
- no user-level profiles are built, and we cannot identify an individual from analytics data; and
- data is retained for a maximum of 13 months, to permit year-over-year comparison.
2.4 What we deliberately do not use
- No advertising or retargeting cookies. We do not run remarketing campaigns and you will not be followed around the internet after visiting.
- No social media pixels. No Meta pixel, no LinkedIn Insight Tag, no X pixel.
- No session recording or heatmapping. We do not record your mouse movements, clicks, scrolling, or keystrokes.
- No third-party fonts or CDN scripts. Everything is served from our own domain, so no third party learns you visited by serving an asset.
- No data broker or enrichment pixels. We do not attempt to de-anonymise visitors or match them against a third-party identity graph.
03Consent and how to refuse
3.1 Where consent is required
Under the ePrivacy Directive as implemented in EEA member states, the UK PECR, and comparable law, consent is required for non-essential cookies. Where you visit from a jurisdiction requiring it, we request consent before setting analytics cookies, and the site functions fully if you decline.
Strictly necessary cookies and the theme preference in local storage do not require consent. The theme preference is not transmitted to us at all.
3.2 Withdrawing consent
You may change your choice at any time by clearing site data in your browser, which resets the consent record, or by writing to [email protected].
3.3 Global Privacy Control
We honour the Global Privacy Control signal where your browser transmits it. When GPC is present we do not set analytics cookies, and we treat it as a valid opt-out of sale and sharing — notwithstanding that we engage in neither.
3.4 Browser controls
All major browsers let you block or delete cookies through their settings, usually under Privacy or Security. Blocking strictly necessary cookies may prevent parts of the site from working, including form submission.
Because we use no third-party advertising cookies, industry opt-out tools such as the Digital Advertising Alliance and Network Advertising Initiative pages have nothing to opt out of in respect of this site.
3.5 Do Not Track
There is no common industry standard for responding to Do Not Track browser signals. We do not respond to DNT differently from GPC, and we honour GPC.
04Legal basis and your rights
Where the GDPR or UK GDPR applies, our legal bases for cookie-related processing are:
| Category | Legal basis |
|---|---|
| Strictly necessary | Legitimate interests — securing the site and delivering the service you requested (Art. 6(1)(f)) |
| Preference | Not personal data. Stored locally and never transmitted. |
| Analytics | Consent where required (Art. 6(1)(a)); otherwise legitimate interests in understanding site usage |
Your rights in respect of any personal data collected via cookies — access, rectification, erasure, restriction, portability, and objection — are set out in our Privacy Policy and are exercisable by writing to [email protected].
4.1 International transfers
Cookie data is processed in the United States. Where transferred from the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses and the UK Addendum as described in the Privacy Policy.
05Changes to this policy
We may update this policy if we change the cookies we use. Before setting any new non-essential cookie we will update this page and request consent where required.
If we ever introduce advertising or third-party tracking cookies — which we have no intention of doing — that change will be announced prominently rather than made by quietly revising this page.
Changes are logged in the changelog. Prior versions on request.
Found something not listed here?
Tell us at [email protected]. This inventory is intended to be complete, and anything on the site that is not on this page is either an error or an omission we want to fix.
Related: Privacy Policy · Terms of Service · Data Processing Addendum