Cookie Policy — Cleera

This Cookie Policy explains what cookies are, how Cleera (a trading name of Seringa Ltd) uses them on cleera.co.uk, and how you can manage your preferences. It should be read alongside our Privacy Policy.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device, remember your preferences, and understand how you interact with content. Similar technologies — such as local storage and session storage — work in a comparable way and are covered by this policy.

2. Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be switched off. They are set in response to actions you take, such as logging in or setting your preferences. Without these cookies, services you have requested cannot be provided.

next-auth.session-token — Stores your authenticated session. Set by NextAuth.js. Duration depends on your role: staff accounts (advisers and admins) expire after up to 7 days or 8–12 hours of inactivity; client portal sessions last up to 90 days; introducer portal sessions up to 30 days. All sessions end when you log out or change your password.
next-auth.csrf-token — Protects against cross-site request forgery attacks. Session cookie.
next-auth.callback-url — Remembers where to redirect you after login. Session cookie.
cookie-consent — Stores your cookie consent preference (localStorage). Persists indefinitely until cleared.

Analytics Cookies

These cookies help us understand how visitors use our public website. They are only set if you accept analytics cookies, and are never used once you are signed in to Cleera, including on a firm's client or introducer portal, or on the sign-in, account-setup and password-reset pages. We use the data in aggregate to improve our website. If you accept analytics cookies and then create an account, we record the sign-up in our analytics using your account's internal reference number, so we can tell which pages lead to sign-ups.

Google Analytics 4 — Loads on our public website only, and only if you accept analytics cookies. It never loads while you are signed in, on the sign-in page, on account-setup or password-reset pages (so those links are not sent to Google), or on a client or introducer portal. Uses cookies such as _ga to distinguish sessions and measure how the site is used. See Google's Privacy Policy and Google's Cookie Policy.

Cookieless Measurement

We also measure how our public website is used and how quickly it loads. These tools do not set cookies or store anything on your device, so they do not need your consent and run whether or not you accept analytics cookies.

Vercel Analytics — Cookieless page-view data (page URL, referrer, device type) on our public website only. It never loads once you are signed in, on the sign-in page, on account-setup or password-reset pages, or on a client or introducer portal, so in-app case and client addresses are not sent to Vercel. No cross-site tracking, no persistent identifiers. Data processed by Vercel Inc. in accordance with their Privacy Policy.
Vercel Speed Insights — Measures Core Web Vitals (LCP, INP, CLS) on the same public pages as Vercel Analytics. Anonymised. No personal data collected.

Functional Cookies

These cookies enable enhanced functionality and personalisation, such as remembering your sidebar preference (collapsed/expanded) and display settings. They are set by our application and are not shared with third parties.

sidebar-collapsed — Remembers whether you prefer a collapsed sidebar (localStorage).

Third-Party Cookies

Some features load cookies or similar technologies from third parties:

Stripe — may set cookies when you interact with the checkout flow. Governed by Stripe's Privacy Policy.
Cloudflare Turnstile — on public website lead capture forms (when enabled), Turnstile may set cookies or use browser storage to distinguish legitimate visitors from bots. Governed by Cloudflare's Privacy Policy. These forms are usually embedded on a customer firm's website; the firm's privacy notice should also explain this processing.

We do not use advertising or tracking cookies from social media platforms.

3. Cookie Durations

Session cookies — Deleted when you close your browser
Persistent cookies — Remain for a set period (see individual entries above)
Local storage — Persists until you clear your browser storage or we remove it

4. Managing Your Preferences

When you first visit our site, you will be shown a cookie banner where you can accept or decline non-essential cookies. You can change your preference at any time by clicking the “Cookie settings” link in the footer, or by clearing your browser's local storage.

You can also control cookies through your browser settings:

Note that disabling strictly necessary cookies may prevent you from logging in or using core platform features.

5. Do Not Track

Vercel Analytics respects the browser's Do Not Track signal. If you have enabled this in your browser, no analytics data will be collected.

6. Changes to This Policy

We may update this Cookie Policy as we add new features or as regulations change. The “Last updated” date at the top of this page indicates when it was last revised.

7. Contact

If you have questions about our use of cookies, please contact us here.