Referino

Cookie Policy

Last updated: October 13, 2026

1. What are cookies

Cookies are small text files stored on your device (computer, tablet or mobile phone) when you visit a website. Websites can also store data in the browser’s local storage (localStorage) or session storage (sessionStorage). This policy covers all of these technologies.

2. In brief

On referino.com we use only cookies and storage that are necessary for the website to function or that remember the settings you have chosen. We do not use advertising or marketing cookies, Google Analytics or third-party tracking cookies. Our web analytics works without cookies. That is why we do not display a cookie banner.

3. Cookies we use

All of the following cookies are set directly by referino.com.

a) Necessary cookies

  • referino_session – keeps your session (sign-in, form security). It expires 120 minutes after your last activity. It is set for every visitor.
  • XSRF-TOKEN – protects forms against cross-site request forgery. It expires 120 minutes after your last activity.
  • remember_customer_… – keeps you signed in to your client account if you tick “Remember me” when signing in. It is valid for 400 days or until you sign out.

b) Functional cookies

These are set only when you change a setting:

  • locale – the language you have chosen. It is valid for 1 year.
  • appearance – light or dark mode in the account. It is valid for 1 year.
  • sidebar_state – whether the side menu in the account is expanded. It is valid for 7 days.

4. Other data stored in your browser

  • user-locale (localStorage) – the language you have chosen, until you delete it.
  • appearance (localStorage) – light or dark mode, until you delete it.
  • Session storage in the account (sessionStorage) – an encryption key that protects the data of your account in the browser history, and technical navigation data. It is deleted when you close the browser tab.

5. Web analytics without cookies

On public pages (home page, legal pages, catalog, blog and review pages) we use our own analytics tool Strixomo, whose script is loaded from strixomo.com. It is not used in the client account.

  • It does not store any cookies or other data on your device and does not create a persistent identifier.
  • It sends the address of the page visited (without parameters, except for campaign parameters), the domain of the referring website, the browser language and the time zone.
  • From the IP address and browser identification, the server derives only a daily pseudonymous identifier (with a key that changes every day), the country and the type of device, browser and operating system. The IP address is not stored.
  • Individual records are deleted within 30 days at the latest; only aggregated statistics are kept.

We process this data on the basis of our legitimate interest in measuring website traffic. You can block the analytics script in your browser, for example with a content-blocking extension.

6. Third-party services

  • Payments: payments and the payment portal run on Stripe’s websites (stripe.com), where Stripe uses its own cookies, for example to prevent fraud. If a payment requires additional confirmation (3D Secure), we display a page on referino.com that loads Stripe scripts from js.stripe.com and helper files from cdn.jsdelivr.net; Stripe may set its own cookies on this page (for example __stripe_mid and __stripe_sid).
  • Video on the home page: it is loaded from youtube-nocookie.com only after you click play. YouTube (Google) may then store data in your browser according to its own policies.

7. Widget on clients’ websites

The Referino widget that clients place on their websites does not set any cookies. In the local storage (localStorage) of visitors to the client’s website it stores an entry named referino_widget_… with the public reviews being displayed. The entry is refreshed regularly and is not deleted automatically. When the widget loads, the browser connects to referino.com, which receives the IP address, browser identification and the address of the client’s website. We count visits as described in the Privacy Policy (GDPR). The client operating the website is responsible for informing its visitors.

8. How to manage cookies

You can delete or block cookies and stored data in your browser settings. Please note that if you delete necessary cookies, you will be signed out, and if you delete functional cookies, your chosen settings will be reset.

9. Changes to this policy

We may update this policy. The current version will always be available at referino.com.

10. Contact

If you have any questions, you can contact us at info@referino.com.