Cookie Policy
Reckonen sets only the cookies needed to sign you in and remember your choices. No ad trackers, no analytics without your say-so. This page lists every one by name and explains how the consent banner works.
1.What cookies are
Cookies are small text files a website stores in your browser. We also use similar browser storage (localStorage) for a few preferences. This Policy covers both and is part of our Privacy Policy. It applies to https://www.reckonen.com, the Reckonen app, and hosted invoice and quote pages.
2.The categories we use
- Strictly necessary — required for the site to work: keeping you signed in, protecting forms against forgery, remembering your cookie choice. These cannot be switched off; without them you could not log in. They do not require consent under the ePrivacy Directive.
- Analytics — would help us understand which features are used and where people get stuck. We do not currently set any analytics cookies. If we add a privacy-respecting analytics tool, it will load only after you opt in via the banner, and this page will list it.
- Marketing / sharing — advertising cookies or sharing of browsing data with ad networks. We do not do this and have no plans to. The category exists in the banner so that a “Do Not Sell or Share” choice is recorded and honored if that ever changes.
3.Every cookie, by name
| Name | Set by | Purpose | Category | Lifetime |
|---|---|---|---|---|
sb-*-auth-token (and chunked .0, .1) | Reckonen (Supabase Auth) | Your sign-in session for the dashboard | Strictly necessary | Session; refreshed while you use the app, expires after inactivity |
sb-*-code-verifier | Reckonen (Supabase Auth) | Completes secure sign-in / magic-link flows (PKCE) | Strictly necessary | Minutes; removed after sign-in |
rk_consent | Reckonen | Records your cookie choice, its timestamp, and whether a Global Privacy Control signal was honored | Strictly necessary | 180 days |
__stripe_mid, __stripe_sid, m | Stripe (on payment and onboarding steps) | Fraud prevention and security for Stripe-hosted payment and identity forms | Strictly necessary | 1 year / 30 minutes / 2 years (set by Stripe) |
reckonen.a2hs.dismissed (localStorage) | Reckonen | Remembers that you dismissed the “add to home screen” tip on your phone | Strictly necessary (preference) | Until cleared |
Stripe’s cookies appear only when a Stripe-hosted element is on the page (paying an invoice, Stripe onboarding, the billing portal). They are governed by Stripe’s Cookie Policy.
We do not set third-party advertising cookies, social-media pixels, session-replay recorders, or fingerprinting scripts.
4.How consent works here
- On your first visit a banner offers Accept all, Reject non-essential, and Manage preferences with equal prominence. Nothing non-essential is set before you choose. No box is pre-ticked.
- Your choice is stored in
rk_consentfor 180 days, after which we ask again. We also re-ask if the categories change. - You can change or withdraw consent any time via Cookie preferences in the footer — as easy as giving it.
- If your browser sends a Global Privacy Control (GPC) signal we automatically record an opt-out of analytics and marketing/sharing and do not show the choice banner; a footer link still lets you change it.
- The Do Not Sell or Share My Personal Information link opens the same preferences with the sharing category, which is your CCPA/CPRA opt-out. As noted above we do not sell or share personal information today.
5.Browser controls
6.Changes and contact
We will update this page whenever a cookie is added or removed and change the effective date. Questions: support@withholden.com.