Cookie Notice

InvoiceFlow sets HttpOnly cookies for the access session and refresh session, plus a non-sensitive session hint. In production they are Secure and SameSite=Lax. The Amazon OAuth flow uses a short-lived HttpOnly flow cookie. These are necessary to authenticate users, protect sessions and complete authorized integrations.

Local storage stores the active workspace identifier and the cookie-consent record (version, timestamp and categories). These are necessary for workspace selection and to remember your privacy choice.

Preferences: no optional preference-tracking technology is currently active. Analytics: no analytics provider is configured in this build. Marketing: no marketing pixels are installed. Optional categories remain off by default and are not initialized before consent.

You can accept all, reject non-essential technologies, or manage categories from the cookie banner or the “Cookie settings” link in the footer. Consent is stored with a version and timestamp. If the cookie/processing configuration materially changes, the operator should increment the consent version and request renewed consent where required.

Rejecting non-essential technologies is as available as accepting them. Necessary authentication storage cannot be disabled while you use the authenticated service. This page lists only technologies actually used; operator review is required if a provider is enabled later.