Cookie policy

Current position

Factelo currently uses no advertising cookies or analytics pixels. We use only technical storage necessary for sign-in, security, language choice and workspace operation.

Authentication cookies

• bra_access_token and bra_id_token: secure HttpOnly session cookies, normally up to 1 hour.
• bra_refresh_token: secure HttpOnly cookie used to refresh a login, up to 30 days.
• All authentication cookies use SameSite=Lax, path / and the Secure flag in production.

Browser storage

• bra_app_language stores the chosen language in localStorage.
• bra_active_business stores the identifier of the last selected business in localStorage.
• Temporary business and invoice caches use sessionStorage and are normally removed when the browser session ends or the user signs out.

Consent and future changes

Essential technical storage does not require optional consent because it is needed to securely provide the requested service. If Factelo later adds analytics, advertising pixels or other non-essential technologies, users will be offered an accept/reject choice before activation and this page will be updated.

Managing storage

Cookies and local storage can be cleared in browser settings. Removing authentication cookies signs the user out, and blocking essential storage may prevent the application from working correctly.