Effective Date: 9 April 2026
Last Updated: 9 April 2026
Version: 1.0
01 Introduction
This Cookie Policy explains how Vanti Ltd (Company No. 00650255), trading as "Smart Core", uses cookies and similar technologies on the Smart Core platform (including the Smart Core Connect web application, marketing website, and associated online services).
This policy should be read alongside our Privacy Policy], which provides further information about how we process Personal Data.
02 What are cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website or use a web application. They are widely used to make websites work more efficiently, provide a better user experience, and supply information to the site operators.
Similar technologies include:
■ Web beacons/pixels: Small transparent images embedded in web pages or emails
■ Local storage: Browser-based storage mechanisms (localStorage, sessionStorage)
■ Session tokens: Server-side identifiers linked to your browser session
03 How we use cookies
3.1 Strictly Necessary Cookies
These cookies are essential for the Smart Core platform to function. They cannot be disabled without affecting the usability of the service. No consent is required for these cookies under PECR.
COOKIE TYPE
PURPOSE
TIME TO LIVE
COOKIE SOURCE
Session identifier
Authenticates your login session and maintains your authenticated state
Session / configurable expiry
Smart Core
JWT access token
Secures API requests between your browser and the Smart Core Connect platform
Short-lived (minutes to hours)
Smart Core
JWT refresh token
Allows renewal of access tokens without re-authentication
Longer-lived (days to weeks)
Smart Core
CSRF token
Protects against cross-site request forgery attacks
Session
Smart Core
Cookie consent preferences
Stores your cookie consent choices
12 months
Smart Core
Load balancer affinity
Routes your session to the correct server instance
Session
Microsoft Azure
WebAuthn/Passkey state
Maintains state during passwordless authentication flows
Session
Smart Core
3.2 Functional Cookies
These cookies enable enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we use.
COOKIE TYPE
PURPOSE
TIME TO LIVE
COOKIE SOURCE
UI preferences
Remembers your display preferences (theme, layout, dashboard configuration)
12 months
Smart Core
Language preference
Stores your selected language
12 months
Smart Core
Map settings
Remembers map view preferences (zoom level, default location)
12 months
Smart Core
Notification preferences
Stores your notification display settings
12 months
Smart Core
Recently viewed items
Tracks recently accessed buildings, floors, or dashboards for quick navigation
30 days
Microsoft Azure
3.3 Analytics and Performance Cookies
These cookies help us understand how the platform is used, identify performance issues, and improve the user experience. We only set these with your consent.
COOKIE TYPE
PURPOSE
TIME TO LIVE
COOKIE SOURCE
Azure Application Insights
Collects anonymised usage telemetry: page views, feature usage, load times, client errors
Session + persistent (up to 12 months)
Microsoft Azure
Performance monitoring
Measures page load times, API response times, and client-side errors
Session
Smart Core
Data collected by analytics cookies includes:
■ Pages and features accessed
■ Time spent on pages
■ Browser type and version
■ Operating system
■ Screen resolution
■ Referring URL
■ Error messages and stack traces (anonymised)
■ API call performance metrics
Data NOT collected:
■ Personal names or email addresses
■ Building occupant data
■ Access control or security data
■ Sensor readings or IoT data
■ Content of communications
3.4 Third-Party Cookies
Certain third-party services integrated into the Smart Core platform may set their own cookies:
COOKIE TYPE
PURPOSE
TIME TO LIVE
COOKIE SOURCE
Mapbox
Map rendering and geolocation
Functional
Mapbox Privacy Policy]
Archilogic
Floor plan rendering
Functional
Archilogic Privacy Policy]
Microsoft Azure
Platform hosting and CDN
Strictly necessary
Microsoft Privacy Statement]
We do not permit advertising or tracking cookies from third-party advertisers on the Smart Core platform.
04 Local storage and session storage
In addition to cookies, the Smart Core platform uses browser local storage and session storage for:
STORAGE TYPE
PURPOSE
DURATION
localStorage
Application state, cached user preferences, offline capability data
Until cleared
sessionStorage
Temporary session state, form data preservation
Until browser tab is closed
IndexedDB
Cached building data, floor plans, and dashboard configurations for performance
Until cleared or cache expiry
05 Mobile application
The Smart Core mobile application (built with Capacitor) uses the following device storage and identifiers:
COOKIE TYPE
PURPOSE
CONSENT REQUIRED
Secure token storage
Stores authentication tokens securely on device
No (strictly necessary)
Push notification token
Enables push notifications for alerts and updates
Yes (device permission prompt)
Device identifier
Associates push notifications with the device
Yes (with push notification consent)
Cached data
Offline access to dashboards and recent data
No (strictly necessary)
06 Your choices
6.1 Cookie Consent
When you first access the Smart Core platform, you will be presented with a cookie consent banner that allows you to:
■ Accept all cookies: Enable all cookie categories
■ Reject non-essential cookies: Only strictly necessary cookies will be set
■ Customise preferences: Choose which categories of cookies to accept
6.2 Changing Your Preferences
You can change your cookie preferences at any time by:
■ Clicking the "Cookie Settings" link in the platform footer
■ Accessing your account settings and navigating to "Privacy & Cookies"
■ Contacting our DPO at jason.brameld@vanti.co.uk
6.3 Browser Settings
You can also control cookies through your browser settings. Most browsers allow you to:
■ View what cookies are set
■ Delete individual or all cookies
■ Block all cookies or third-party cookies
■ Set preferences for specific websites
Please note that blocking strictly necessary cookies will impair the functionality of the Smart Core platform, and you may be unable to use certain features.
Browser cookie management guides:
■ Chrome: chrome://settings/cookies
■ Firefox: about:preferences#privacy
■ Safari: Preferences > Privacy
■ Edge: edge://settings/privacy
07 Cookie retention
COOKIE TYPE
RETENTION PERIOD
Strictly necessary
Session to 30 days (varies by cookie)
Functional
12 months
Analytics and performance
12 months
We review cookie retention periods annually and minimise retention where possible.
08 Updates to this policy
VERSION
DATE
AUTHOR
SUMMARY OF CHANGES
1.0
9 April 2026
Jason Brameld
Initial draft for legal review
Revision History
We may update this Cookie Policy from time to time. Material changes will be communicated through the cookie consent banner and/or the Smart Core platform.
09 Contact us
For questions about this Cookie Policy, please contact Vanti’s Data Protection Officer :
Email: dpo@vanti.co.uk
Vanti Ltd (trading as Smart Core)
10 Bonhill St, London EC2A 4PE
United Kingdom
This Cookie Policy was prepared on 9 April 2026 and should be reviewed by qualified legal counsel before publication.