Version 2026-11-01. Effective 1 November 2026.
1. About this notice
1.1. This notice explains the cookies and other storage that Sahora, provided by JTL Advisory and Business Solutions Inc. ("JTL", "we"), uses on your browser or phone. It is part of the Privacy Notice (/legal/privacy).
1.2. A cookie is a small file a website stores in your browser. "Local storage" and "session storage" are similar places in your browser where a website can keep small pieces of data.
2. The public website
2.1. No cookies for signed-out visitors. Sahora sets no cookies for analytics, advertising or anything else while you are not signed in.
2.2. Counting visits without cookies. We count page visits ourselves, without cookies and without storing anything on your device. Our server records the page, the website you came from, your browser's identification string, the approximate place reported by our hosting provider, and a coded value of your internet address (a keyed hash; the address itself is not stored). These records are kept for 13 months. See the Privacy Notice, section 3.1.
2.3. Bot check on forms. The sign-up and contact forms use Cloudflare Turnstile to check that a person, not a program, is sending them. Turnstile runs in a small frame from Cloudflare's own site, under Cloudflare's privacy policy. In the mode Sahora uses it does not set a cookie on Sahora's site; Cloudflare may keep data in its own frame for the check.
2.4. Fonts and scripts. The website's fonts and the files used for the clock-in camera check are served from Sahora itself, not from a third-party site.
3. When you sign in
When you sign in, Sahora uses only cookies that are strictly necessary for the service. They cannot be switched off, because Sahora cannot keep you signed in safely without them.
| Cookie | What it does | How long |
|---|---|---|
Sign-in session (sb-...-auth-token, possibly split into numbered parts) |
Keeps you signed in and lets the database check who you are | The cookie can stay in your browser for up to 400 days, but the session it holds ends when you sign out or after 30 minutes without activity (section 3.2) |
jtl_last_seen |
Records when you were last active, to sign you out after a period without activity (currently 30 minutes) | Until you close the browser, or earlier when the idle limit signs you out |
jtl_device_noted |
Limits how often your browser is noted in your list of signed-in devices | Until you close the browser |
3.1. jtl_last_seen and jtl_device_noted cannot be read by page scripts ("HttpOnly") and are sent only over secure connections. The sign-in session cookie is read by Sahora's own page scripts, which need it to talk to the database. None of these cookies is shared with other websites.
3.2. When you come back after closing the browser, Sahora signs you out if more than 30 minutes have passed since you last signed in.
4. Storage on your phone or computer
The installable Sahora app, the employee portal and the website may keep the following in your browser's storage. They stay on your device and are not used to track you.
| Name | Kind | What it holds | Who sets it |
|---|---|---|---|
sahora_device_id |
Local storage | A random id for your phone, so Sahora can recognize the phone you clock in with | Employee portal, clock-in |
sahora:punch-queue |
Local storage | Clock-ins made without a signal, waiting to be sent (only if your employer allows offline clock-ins) | Employee portal, clock-in |
sahora.payslips |
Local storage | Payslip figures you chose to keep for reading offline (never the PDF) | Employee portal, payslips |
sahora:install-dismissed |
Local storage | That you closed the "install the app" hint | App shell |
sahora_consent |
Local storage | Your choice in the cookie preferences, if you save one | Website footer, Cookie preferences |
sahora_hidden_incidents |
Session storage | Status notices you closed, until you close the browser tab | Status banner |
| App files | Browser cache (service worker) | Sahora's own static files (scripts, styles, icons) so the app opens faster and shows an offline page. Pages with your data are not stored. | Installable app |
You can remove all of these by clearing the site's data in your browser settings, or, for kept payslips, from the portal itself.
5. If this changes
5.1. Sahora uses no non-essential cookies or analytics tools today. If we add one (for example, a web analytics service or a chat widget), we will first add it to this notice and to the Subprocessors page, use it in a cookieless mode where it offers one, and ask for your consent before setting anything that is not strictly necessary. You can change your choice at any time through "Cookie preferences" at the bottom of every page of the website.
6. Contact
Questions about this notice: support@sahora.ph. Personal data requests: mail@sahora.ph (section 16 of the Privacy Notice).