Legal · Cookie Policy
Cookies & Your Preferences
We use cookies to keep you signed in, remember your preferences, and understand how SORMALITICS is used. Everything except the essentials is off until you switch it on, and you can change your mind here at any time.
Essential
Always onRequired to sign you in and keep the session secure. These cannot be turned off, and no consent is required for them under UK/EU or South African law.
Analytics
Help us see which features are used and where the product is confusing. Nothing here loads unless you turn it on.
Preferences
Remember your currency, language and region so you do not have to set them again. Stored in your browser rather than as cookies — see the note below the categories.
Marketing
We do not currently run any advertising or conversion tracking. This category exists so that your choice is already recorded if we ever do — and we would tell you before that changed.
Browser storage (not cookies)
Some settings are kept in your browser's local storage rather than in a cookie. The difference matters: local storage has no expiry date, it is never sent to our servers with your requests, and clearing your cookies does not remove it. Clearing site data does.
| Key | What it is for | Category |
|---|---|---|
| fk:cookie-consent | Your choices on this page | Essential |
| fk:cookie-consent-date | When you last made those choices | Essential |
| fk:currency | Your default currency | Preferences |
| fk:locale | Your language setting | Preferences |
| fk:country | Default jurisdiction for tax calculations | Preferences |
| fk:company | Company details remembered between documents | Preferences |
| fk:vat | Your default VAT setting | Preferences |
| sorm-sidebar-collapsed | Whether the sidebar is collapsed | Preferences |
| sormalitics:lastPayrollRegion | The payroll region you last used | Preferences |
| *_draft | Unsent document drafts, kept so you do not lose work | Preferences |
| sentryReplaySession | Ties the pieces of one error recording together. Session storage — cleared when you close the tab. Set by our error tracking, which is not part of analytics consent; see "Error recordings" below. | Diagnostics |
The two consent keys are classed as essential because they are how your choices on this page survive a reload. Without them we would have to ask you again on every visit.
Essential only — unsaved changes
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember information about your visit, making it easier to return and more useful to you. Cookies cannot execute code or carry viruses.
How we use cookies
SORMALITICS uses cookies to provide the service, keep it secure, and remember your preferences. We do not sell data to third parties, and we run no behavioural advertising.
Nothing non-essential loads until you accept it. Analytics scripts are not placed on the page at all unless you have turned that category on. Declining is not a preference we note and then ignore — the scripts genuinely do not run.
About Microsoft Clarity. Clarity records how visitors move through a page, which is more than aggregate counting — so we should be plain about it. It runs only on public marketing pages, never on the dashboard, payroll, checkout or sign-in screens, and only if you accept analytics. Google Analytics runs site-wide when accepted, with IP anonymisation on.
Error recordings
This one is not in the toggles above, and we would rather explain why than let you find it in a storage list. It is not analytics — it does not tell us which features are popular, and it does not run on a healthy session at all.
How it works. Your browser keeps roughly the last minute of what happened on the page in memory and continuously throws it away. If the application throws an error — or if you click the same control several times in a way that suggests it is not responding — that minute is sent to Sentry, our error-tracking provider, so we can see what broke. Otherwise it is never sent anywhere.
What it can and cannot see. Every piece of text, every field value and every image is replaced with blocks inside your browser before anything is transmitted. The readable version never leaves your device. We receive the layout of the page and which element was clicked — not what it said. Request and response contents are not captured at all, so no salary figure, identity number or bank detail is in the recording. Sentry deletes recordings after 90 days.
Why it is not on a consent toggle. We rely on legitimate interests rather than consent, because the sessions that break are exactly the ones a consent gate would hide from us — and we are contractually obliged to keep this product working. You can still object: email privacy@sormalitics.com and we will exclude you, no justification needed.
Managing cookies in your browser
In addition to the controls above, you can manage or delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to SORMALITICS.
Last updated: 23 August 2026 · v2026-08-25 · Applies to sormalitics.com and all subdomains
Questions? Email privacy@sormalitics.com