Cookies Policy

We are VIRTUONIC LABS LTD, a private limited company registered in England and Wales (company number 17151366). Our registered office is 128 City Road, London, United Kingdom, EC1V 2NX. Cendroa is our website and service at https://cendroa.com.

This Policy explains how we use cookies and similar technologies. It applies together with our Privacy Policy.

Cookies are small text files stored on your device when you visit a website. Similar technologies include local storage and IndexedDB. They can remember a signed-in session, a layout preference, or information needed to complete a payment.

Some cookies are set by us (first-party). Others are set by a provider we use (third-party), for example Google when you sign in, or our payment provider at checkout.

We use cookies and similar technologies only to:

• keep you signed in with Google / Firebase;
• complete token purchases with our payment provider;
• remember whether the dashboard menu is open;
• remember the colour theme of the site.

We do not use cookies to build advertising profiles, to track you across other websites, or to sell data about you.

On cendroa.com we currently set this first-party cookie:

• sidebar:state — remembers whether the dashboard sidebar is expanded or collapsed. It is stored for 7 days, on the path /. It does not identify you by name or email. It is a functional preference cookie.

We do not currently show a cookie banner, because we do not run advertising or analytics cookies. You can delete sidebar:state in your browser at any time. The menu will just return to its default layout.

Firebase Authentication stores your sign-in session in the browser (typically IndexedDB and local storage). That is needed to keep you logged in and to call our APIs as you. It is strictly necessary for the account features of Cendroa. Signing out clears that session.

Theme preference may be stored in local storage under the key theme so the site can remember light, dark or system colour mode. This is a functional preference, not advertising.

Your device timezone is read in the browser when you use the service and may be saved on your account so receipts show the correct local time. That is account data, not a cookie. See our Privacy Policy.

When you sign in with Google, Google may set cookies on its own domains (for example accounts.google.com) to authenticate you. Those cookies are controlled by Google, not by us. See Google’s own privacy and cookie information.

When you buy tokens you are sent to our payment provider, Secure Processor (checkout.secure-processor.com). That site may set cookies that are strictly necessary to process the card payment and prevent fraud. We do not receive your full card number.

Hosting, storage and AI providers we use (including ImageKit, OpenAI and Replicate) process data on the server to deliver a generation. They do not currently place advertising cookies on Cendroa for us.

We do not currently run Google Analytics, advertising pixels, social plugins that track you, or cross-site marketing cookies. A Firebase measurement ID exists in our project configuration, but we have not switched on Firebase Analytics on this site.

If we later add analytics or advertising cookies, we will update this Policy. Where UK law requires consent for those cookies, we will ask before we set them.

Under the UK Privacy and Electronic Communications Regulations, cookies that are strictly necessary to provide a service you requested (sign-in and payment) do not need prior consent.

The sidebar and theme preferences are low-impact functional storage used only to make the interface usable. Personal data connected with cookies and similar technologies is handled as described in our Privacy Policy (including legitimate interests in a usable dashboard layout).

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies or Firebase session storage will stop sign-in, dashboard access or checkout from working.

You can also use your browser’s site settings to clear data for cendroa.com, which removes our first-party cookie, local storage and the Firebase session on that device. Third-party cookies set by Google or the payment provider are managed on those providers’ domains or through the same browser controls.

We may update this Policy when the product, providers or the law changes. The “Last updated” date at the top will change.

For any questions about this Cookies Policy or Cendroa, contact us at support@cendroa.com.