1. Essential storage only
Finance does not use advertising cookies, analytics cookies or third-party tracking. We use only cookies and storage required for authentication, security, language preferences, the app interface and features requested by the user. Technically necessary storage does not require advertising or analytics consent.
2. Cookies
finance_session maintains your authenticated, CSRF-protected session. It is HttpOnly, SameSite=Lax and Secure on HTTPS, and normally ends with the browser session.
finance_remember is created only when you choose “Keep me signed in” and may restore login for approximately 30 days. The server does not store a usable copy of the complete token; it stores a selector and a hash of the validator.
finance_lang remembers your selected language for approximately one year.
3. LocalStorage and SessionStorage
finance_cookie_notice_v1 only records that you dismissed the essential-storage notice. Finance also uses short-lived sessionStorage for mobile-navigation state and smooth page transitions. These values do not contain your financial transactions.
4. PWA and Service Worker
The Service Worker may cache static files such as CSS, JavaScript, icons and the manifest to improve loading speed. Authenticated pages and API responses containing financial data are intentionally not stored as offline content.
5. Push notifications
A push subscription is created only after you enable notifications. Its technical identifiers and the cryptographic information required for delivery are stored on the server. You can revoke permission at any time in your device or Finance settings.
6. Passkeys
Passkeys are not advertising cookies. The credential is managed by your device or password manager through WebAuthn. Finance stores public verification information, not the private passkey key.
7. Removing local storage
Signing out removes the active session and revokes the corresponding remembered login. Push can be disabled in device settings, and local storage can be removed by clearing site/PWA data. Clearing this data may sign you out and reset local preferences.
8. Future changes
If Finance later introduces analytics, advertising or another form of storage that is not technically necessary, this policy will be updated and any legally required consent will be obtained before such storage is used.