Cookie notice
Effective and last updated: 18 October 2026
CentraPoint is a trading name of Global Software Services (Pty) Ltd, registration number 2021/476309/07.
1. In short
CentraPoint uses only the cookies and browser storage it needs to sign you in, keep you secure and remember simple settings. We use no analytics, advertising or tracking cookies, so we do not show a cookie banner. This notice lists every cookie and storage item our own code sets. It forms part of our privacy policy.
2. This website (centrapoint.co.za)
Our code sets no cookies and no browser storage on this website. Two features involve other companies:
- Google reCAPTCHA on the contact page. When the contact form uses it, Google's reCAPTCHA script loads as the page opens. It assesses whether the visitor is a person and may set Google cookies or browser storage for that. The page says when reCAPTCHA is active, and Google's privacy policy and terms apply.
- WhatsApp chat button. It sets nothing until you click it. Clicking opens WhatsApp (Meta), whose own cookies and policies apply.
3. The CentraPoint app, payment pages and customer portal
These are set on app.centrapoint.co.za. All cookies are HttpOnly and, on HTTPS, Secure.
| Name | Purpose | How long |
|---|---|---|
next-auth.session-token | Keeps you signed in to the CentraPoint app. On HTTPS its name starts with __Secure-. | Up to 12 hours |
next-auth.csrf-token | Protects the sign-in form against cross-site request forgery. On HTTPS its name starts with __Host-. | Until you close the browser |
next-auth.callback-url | Returns you to the page you wanted after you sign in. On HTTPS its name starts with __Secure-. | Until you close the browser |
cp_ref | Remembers the referral link you followed, so that the referral counts when you sign up. Deleted when you sign up. | 30 days |
cp_acct_oauth | Protects the connection to an accounting system (Xero, QuickBooks, Zoho Books or Sage) while you authorise it. | 10 minutes |
cp_portal_<merchant> | Keeps a payer signed in to a merchant's customer portal after they enter the emailed code. | 24 hours, renewed while in use |
cp:onboarding-collapsed | Local storage, not a cookie: remembers whether you collapsed the setup guide on the dashboard. | Until you clear it |
When a payer is sent to a payment gateway's page (for example Netcash, PayFast or Ozow), that gateway's own cookies and privacy policy apply there.
4. The developer documentation (docs.centrapoint.co.za)
The documentation sets no cookies. It keeps two settings in your browser's local storage:
| Name | Purpose | How long |
|---|---|---|
cp-theme | Remembers light or dark mode. | Until you clear it |
cp-code-lang | Remembers the programming language you chose for code samples. | Until you clear it |
5. Your choices
You can block or delete cookies and local storage in your browser settings. If you block the app's cookies, you cannot sign in to CentraPoint or the customer portal. If you clear local storage, the settings above go back to their defaults. Because we use only strictly necessary cookies, there are no optional cookies to switch on or off. If we ever add optional cookies, we will ask for your consent first and add a way to change your choice.