> Which cookies AccountingKit sets across its website, developer console, and documentation, and why there is no consent banner. Legal # Cookie Notice AccountingKit sets one cookie across its whole surface, and that cookie is what keeps you signed in. There is no analytics cookie, no advertising cookie, and nothing to opt out of. - **Version**: 1.0 - **Effective**: 1 September 2026 - **Questions**: privacy@accountingkit.dev On this page 1. [This website](#marketing) 2. [The developer console](#console) 3. [The documentation site](#docs) 4. [Why there is no banner](#consent) 5. [Controlling cookies](#control) ## This website sets no cookies **accountingkit.dev stores nothing in your browser.** No cookies, no local storage, no analytics, no advertising pixels, no session recording, no third-party tags. The pages are static files. Two things still happen that are worth naming, because neither is a cookie but both involve you: - **Server request logs.** Cloudflare, which serves these pages, processes the request metadata any web server sees — IP address, user agent, requested URL, timestamp — to deliver the page and defend it against attack. It is not used to profile you. - **Campaign parameters in links.** When you click through to the developer console, a script appends the page you came from and any campaign parameters already in your URL to the destination link. It travels in the URL, is length-capped, and applies only to console links. Nothing is stored on your device. Web fonts are self-hosted, so no request leaves for a font provider when you load a page. ## The developer console The console at app.accountingkit.dev sets one cookie, and it is strictly necessary — without it, signing in does not work. Cookie Purpose Type Lifetime **Session token** Keeps you signed in and ties each request to your account and organization. Set by our own authentication layer, marked HttpOnly, Secure, and SameSite=Lax, so it is not readable by scripts and is not sent from other sites Strictly necessary 7 days, refreshed while you stay active The console also uses your browser's local storage for interface preferences you set yourself — for example whether you are looking at the test or live environment. That never leaves your browser and contains no personal data. ## The documentation site The documentation at docs.accountingkit.dev is static and sets no tracking cookies. It stores your light or dark theme preference locally in your browser so the site does not flash the wrong theme on the next page load. ## Why there is no consent banner Under the EU ePrivacy Directive and equivalent rules, consent is required for storage that is not strictly necessary to deliver a service the user asked for. Every cookie described here is strictly necessary, and we set no others, so there is no lawful basis to ask about and nothing a banner could usefully offer you. If we ever introduce analytics or any non-essential storage, we will ask for consent before setting it, and update this page and its effective date first. ## Controlling cookies Every browser lets you view, block, and delete cookies through its settings. Blocking the console session cookie will prevent you from signing in, since that is the only thing it does. Blocking cookies has no effect on this website, which sets none. Questions about anything on this page go to [privacy@accountingkit.dev](mailto:privacy@accountingkit.dev). See the [Privacy Policy](https://accountingkit.dev/privacy/) for the fuller picture of what we process and why. Related [**Terms of Service** The contract that governs access to the API, the console, and workflow execution.](https://accountingkit.dev/terms/) [**Privacy Policy** What personal data AccountingKit handles, why, where it lives, and for how long.](https://accountingkit.dev/privacy/) [**Data Processing Addendum** Article 28 processor terms, the processing record, security measures, and transfer safeguards.](https://accountingkit.dev/dpa/) [**Subprocessors** Every third party in the processing chain, what it touches, and where it runs.](https://accountingkit.dev/subprocessors/) [**Acceptable Use Policy** What you may not run through AccountingKit, and what happens if you do.](https://accountingkit.dev/acceptable-use/) [**Security** The controls behind the platform, stated plainly, including the ones not yet certified.](https://accountingkit.dev/security/)