Cookie Policy

Last updated: January 2026

1. What Are Cookies

Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and understanding how you use our service.

2. How We Use Cookies

We use cookies for the following purposes:

• Essential Cookies: Required for the website to function properly
• Authentication Cookies: Keep you signed in to your account
• Security Cookies: Help protect against fraud and unauthorized access
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences

3. Types of Cookies We Use

3.1 Essential Cookies

These cookies are necessary for the website to function and cannot be switched off. They include:

• Session identifiers that maintain your login state
• Security tokens that protect against CSRF attacks
• Preference settings that you configure

3.2 Analytics Cookies

We may use analytics services to understand how visitors interact with our website:

• Cloudflare Web Analytics: Privacy-focused analytics that does not use client-side cookies
• Google Analytics: Helps us analyze visitor behavior and site usage (if enabled)
• Performance Monitoring: Tracks page load times and error rates

3.3 Third-Party Services

We may use third-party services that place their own cookies:

• Payment Processors: Stripe or similar services for subscription billing
• Customer Support: Support tools for user assistance
• CDN Providers: Content delivery and security services

4. Cookies That May Be Used

Depending on features enabled, the following cookies may be set:

4.1 Authentication Cookies

• next-auth.session-token: Maintains your authenticated session
• next-auth.csrf-token: Protects against cross-site request forgery
• __Secure-next-auth.callback-url: Handles OAuth redirects securely

4.2 Analytics Cookies

• _ga: Google Analytics unique identifier (2 years), if enabled
• _gid: Google Analytics session identifier (24 hours), if enabled
• _gat: Google Analytics throttle rate (1 minute), if enabled

5. Cookie Lifespan

Different cookies have different durations:

• Session Cookies: Expire when you close your browser
• Persistent Cookies: Remain on your device for a set period or until deleted
• Authentication Tokens: Typically valid for 30 days (configurable)

6. Third-Party Cookies

Some services we may use can place cookies on your device:

• Cloudflare Web Analytics: Does not use client-side cookies
• Google Analytics: For website analytics and performance monitoring (if enabled)
• Stripe: For secure payment processing during checkout
• Cloudflare: For DDoS protection and content delivery

These third parties have their own privacy policies and cookie policies. We encourage you to review their policies directly.

7. Managing Cookies

7.1 Browser Settings

You can control and manage cookies through your browser settings:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Manage cookies

7.2 Cookie Preferences

You can:

• Block all cookies from being set
• Delete existing cookies from your device
• Set notifications when cookies are sent
• Block third-party cookies

8. Impact of Disabling Cookies

Important: Disabling cookies may impact your experience:

• You may not be able to sign in to your account
• Some features may not function properly
• Your preferences may not be saved
• You may see less relevant content

Essential cookies are required for the service to function. If you block these cookies, you will not be able to use our service.

9. Do Not Track

We do not currently respond to Do Not Track (DNT) browser signals.

10. International Data Transfers

Some cookies may transfer data to countries outside your own. For example:

• Google Analytics servers are located in the United States
• Payment processing occurs through secure PCI-compliant data centers

We ensure appropriate safeguards are in place to protect your data in accordance with this Cookie Policy and our Privacy Policy.

11. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our use of cookies or for other operational, legal, or regulatory reasons. We will notify you of material changes by:

• Posting the new policy on our website
• Updating the "Last updated" date at the top of this policy
• Displaying a prominent notice on our website

12. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have certain rights regarding cookies:

• Right to Information: Clear information about cookies we use
• Right to Consent: Grant or withdraw consent for non-essential cookies
• Right to Object: Object to certain types of cookies
• Right to Delete: Delete cookies already stored on your device

13. CCPA Privacy Rights (California)

If you are a California resident, you have specific rights regarding your personal information:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to equal service and price

14. Contact Us

If you have questions about our use of cookies, please contact us at:

Email: hello@invoiceportalx.com
Website: https://invoiceportalx.com

15. Consent Mechanism

We do not currently use a cookie banner or preference center. You can manage cookies through your browser settings. Where required by law, we will obtain consent for non-essential cookies.