Privacy and cookies

Policy version: 2026-10-14.1 · 14 October 2026

Essential cookies keep sign-in, security and your choices working. Optional product analytics helps us understand feature use. It excludes journal contents, filenames and advertising tracking.

Essential cookies are always active. You can change your choice at any time. Refusing analytics does not limit the app.

Cookies and browser storage

Name	Purpose	Retention	Category
__Host-af_access / refresh / invite	Authentication	1 hour / 30 days / 7 days	Essential
__Host-af_guest	Guest / sign-in mode	1 year	Essential
__Host-af_google_pkce / google_state	Google sign-in protection	10 minutes	Essential
__Host-af_recovery	Password recovery proof	10 minutes	Essential
__Host-af_registration	Terms acceptance before registration	180 days	Essential
__Host-af_privacy	Cookie choice, version, timestamp and random browser reference	180 days	Essential
__Host-af_visitor	Optional product analytics reference	1 day	Optional analytics
accounting-flow-language / accounting-flow-appearance / accounting-flow-flow1-dots / af-fx-rate-directions	Language, appearance and FX display preferences	Until cleared	Local storage
accounting-flow-import-mappings-v1	Mappings explicitly remembered in this tab	Tab session	Session storage
af-temp-view-flow / flow2 / sankey	Temporary map layouts during sign-in	Tab session	Session storage
af-active-analysis	Temporary analysis checkpoint for sign-in; can contain journal data	Up to 1 hour; removed on restore / sign-out	Session storage
af-pending-file-import / accounting-flow-pending-import	Selected files waiting for sign-in; browser only	30 minutes; cleared on import, removal or sign-out; expired copies pruned on next use	IndexedDB and session storage

All application cookies use Secure, HttpOnly, SameSite=Lax and Path=/. Optional analytics is off until accepted. No advertising cookies or third-party analytics scripts are installed by this app.

Optional events include feature name, quantity, timestamp, a random browser reference and, when signed in, account/workspace references. No journal contents, filenames, raw IP addresses or email addresses are included. These events are retained for up to 90 days; expired records are removed in bounded batches during activity. Choice receipts are retained for 180 days. Withdrawing consent stops new collection and removes the matching product events.

Operational account, project, billing and security records are required to provide the service and are separate from optional analytics. Registration acceptance is kept for the account lifetime. Prior accounts without a versioned receipt are shown as historical records, never as proof of consent.

External sign-in and payment providers have their own policies when you visit them. Browser settings can clear local data; clearing sign-in storage may end your session or discard unsaved work.