This cookie policy explains how SoftInstigate Srl Società Benefit uses cookies and similar technologies on the websites restheart.com and restheart.org and on Sophia (bysophia.ai).

Last updated: November 7, 2026

What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

RESTHeart.com (Main Website)

We do not set any cookies on restheart.com.

Our main website operates without setting any cookies on your device. We have designed our website to function fully without the need for cookies while still providing you with all the information and functionality you need.

RESTHeart.org (Documentation Website)

We do not set any cookies on restheart.org.

The interactive examples of the documentation use your browser’s local storage. They keep whether a panel is collapsed, and the connection settings you enter to run the examples against your own RESTHeart instance (URL, username, password or JWT).

These values stay in your browser and are never sent to SoftInstigate. They are used only to call the instance you indicate.

You can remove them at any time by clearing the site data of restheart.org in your browser.

bysophia.ai (Sophia)

We use a single technical cookie for authentication.

Sophia, our conversational AI knowledge base platform, uses one essential cookie that is strictly necessary for the service to function:

Authentication Cookie: - Name: rh_auth - Purpose: User authentication and session management - Type: Technical/Essential cookie (HttpOnly, Secure) - Duration: Up to 8 hours (renewed on each authenticated request) - Data stored: Encrypted JWT containing the user identifier and roles. No personal information beyond the username (which is the user’s email address).

This cookie is essential for: - Maintaining your login session across the web application - Authenticating REST API and MCP (Model Context Protocol) requests issued from the same browser - Preventing unauthorized access to your Tenant and chat history

The cookie is set by the backend for the bysophia.ai domain with the HttpOnly and Secure flags, meaning it cannot be read by client-side scripts and is only transmitted over HTTPS.

No third-party cookies are used by Sophia. The chat interface itself sets no cookies and does not include any third-party tracking or analytics scripts. The legal documents available through the footer (Terms, Privacy, Cookies) are loaded via plain anchor tags and do not trigger third-party requests.

Anonymous chat: When a User interacts with a public Sophia agent without logging in, no authentication cookie is set. The chat session is identified only by an in-memory session identifier, which is not persisted.

Analytics and Traffic Data

We collect traffic data of restheart.com and restheart.org through Plausible Analytics, a privacy-focused analytics service that:

Plausible Analytics helps us understand: - How many people visit our website - Which pages are most popular - General geographic regions of visitors (country-level only) - Referring websites and search terms

All data collected through Plausible is: - Aggregated and anonymous - Cannot be used to identify individual users - Used solely for improving our services - Never sold or shared with third parties

No Tracking or Marketing Cookies

We explicitly do not use: - Tracking cookies - Marketing cookies - Social media cookies - Third-party advertising cookies - Cross-site tracking technologies - Fingerprinting techniques

Your Choices and Control

For RESTHeart.com

Since we don’t use any cookies on our main website, no action is required from you.

For RESTHeart.org

No cookies are set. The values kept in local storage by the interactive documentation can be removed by clearing the site data of restheart.org in your browser.

For bysophia.ai

The single rh_auth cookie is essential for authentication. If you disable it: - You will not be able to log in to Sophia or to use the administrative interface - You will still be able to use public Sophia agents anonymously (no cookie set in that case)

Browser Settings

You can control cookies through your browser settings: - Chrome: Settings > Privacy and security > Cookies and other site data - Firefox: Settings > Privacy & Security > Cookies and Site Data - Safari: Preferences > Privacy > Cookies and website data - Edge: Settings > Cookies and site permissions > Cookies and site data

Updates to This Policy

We may update this cookie policy from time to time. When we do, we will: - Update the “Last updated” date at the top of this policy - Notify users of significant changes through our usual communication channels - Post the updated policy on our website

Contact Us

If you have questions about our use of cookies or this cookie policy, please contact us:

For more information about how we handle your personal data, please see: - Privacy Policy - Terms and Conditions

Questions About Cookies?

If you have questions about how we use cookies or want to know more about our privacy practices, please contact us at info@softinstigate.com.

View Privacy Policy | View Terms and Conditions | Contact Us

Contact Us