Cookie Policy
Last updated: 5 July 2026
1. What are cookies?
Cookies are small text files placed on your device by a website. They are widely used to make websites work, remember your preferences, and provide information to the website owner. This policy explains which cookies we use and why.
2. Cookies we set
| Name | Purpose | Type | Duration |
|---|---|---|---|
| refreshToken | Stores your refresh token to keep you logged in. This is a strictly necessary cookie — the Service cannot function without it for authenticated users. | Strictly necessary | 7 days (up to 30 days with "Remember me") |
| _ga, _ga_* | Set by Google Analytics 4 to distinguish visitors and measure how the Service is used. Only set after you opt into Analytics in the cookie banner. | Analytics (consent-based) | Up to 2 years |
Local storage
We also store data in your browser's localStorage, which is not a cookie but operates similarly:
- Redux Persist state: Your authentication token and UI preferences (e.g., selected locale) are stored in localStorage so they persist across browser tabs and sessions.
- cookie_consent: Your cookie preference is kept in localStorage (not a cookie, no expiry) so we do not show the banner again.
- analytics_consent: Records whether you opted into analytics, so we honour your choice on future visits.
3. Analytics & third-party cookies
We use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use the Service. To protect your privacy it runs in a cookieless mode by default: no cookies are set and no identifier is stored on your device — only anonymous, aggregate measurement. If you opt into Analytics in the cookie banner, we enable full analytics and its cookies (_ga, _ga_*) are set. IP anonymisation is always on. You can withdraw consent at any time from your cookie preferences.
Google may process this data on servers outside the EEA, including the United States. Such transfers are covered by the EU Standard Contractual Clauses and Google's data-processing terms. See Google's Privacy Policy for details.
We set no advertising cookies. The Mollie payment checkout runs on Mollie's own domain and may set its own cookies, which are governed by Mollie's cookie policy. Our bot protection (ALTCHA) is self-hosted, uses proof-of-work and sets no cookie.
4. Managing cookies
You can manage your cookie preferences at any time:
You can also control cookies through your browser settings:
Note: blocking the refreshToken cookie will prevent you from staying logged in.