Cookie Policy

Last updated: 30 September 2026

Surge Service uses one strictly necessary session cookie and no tracking of any kind.

Draft for legal review

This document has 3 open points, highlighted below. They will be resolved before the document takes effect.

This policy explains which cookies and similar technologies Surge Service uses. It covers the web app, the app surfaces inside Pipedrive, the customer portal and these legal pages. It is published by Sales-Surge B.V. ("Sales Surge", "we", "us").

1.In short

One first-party session cookie keeps you signed in to the web app.
No analytics, advertising or social media cookies, and no third-party tracking scripts.
Because the session cookie is strictly necessary to deliver the service you asked for, Dutch law (article 11.7a of the Telecommunicatiewet) does not require consent. That is why you see no cookie banner.

Cookie	Purpose	Properties	Lifetime
Session cookie Open point: [cookie name, confirm with the auth module]	Keeps you signed in after you log in with your Pipedrive account, and stops someone else from reusing your session.	First-party and strictly necessary. Set with HttpOnly, Secure and SameSite=Lax. Contains a signed session reference, not a profile of you.	7 days, renewed while you use the app. Removed when you log out.

3.Inside Pipedrive

The panels, modals and floating windows that the app shows inside Pipedrive run in an embedded frame. They do not use cookies. When a view opens, Pipedrive hands it a signed token. We exchange that token for a short-lived access token that is kept in memory only and disappears when you close the view.

Pipedrive sets its own cookies on its own pages. Those are covered by Pipedrive's cookie policy, not by this one.

4.Customer portal and web forms

Your customers reach the customer portal through a signed sign-in link that is valid for 7 days. Web forms work without cookies. Open point: [Confirm with the channels module whether the portal keeps a session cookie after the sign-in link is opened. If it does, add it to the table above as a strictly necessary cookie.]

5.Payments

Checkout and the billing portal open on Stripe's own pages. Stripe sets cookies there for payment processing and fraud prevention. Those cookies are covered by Stripe's cookie policy.

6.Other browser storage

We do not use local storage, fingerprinting or similar techniques to track you or to build profiles. Open point: [Confirm whether the app keeps interface preferences, such as theme or collapsed panels, in browser storage. If so, list them here as functional storage.]

7.How to control cookies

You can block or delete cookies in your browser settings. If you block the session cookie, you cannot stay signed in to the web app. The app surfaces inside Pipedrive keep working, because they do not use cookies.

8.Changes and contact

If we ever add a cookie that is not strictly necessary, we will update this page first and ask for your consent where the law requires it. Questions about cookies go to info@sales-surge.nl. Our Privacy Policy explains how we handle personal data in general.