Legal
Cookie Policy
Last updated October 14, 2026
One essential cookie keeps you signed in across CashSDK sites. Analytics cookies are optional (in the EEA, UK, and Switzerland they are set only if you accept them) and advertising cookies don't exist here at all.
On this page
1. What this policy covers#
This Cookie Policy explains how CashSDK uses cookies and similar technologies (such as browser local storage) on cashsdk.com and its subdomains, including app.cashsdk.com (the dashboard), auth.cashsdk.com (sign-in), and docs.cashsdk.com (documentation). It supplements our Privacy Policy at cashsdk.com/privacy.
It covers our own websites and dashboard. Cookies or storage that a customer's app or website sets are the customer's responsibility, under their own policies.
2. What cookies are#
Cookies are small text files a site stores in your browser. Session cookies expire when you close the browser; persistent cookies last until a set expiry date. First-party cookies are set by the domain you are visiting; third-party cookies are set by another domain. We use first-party cookies, plus a small number set by the infrastructure and payment providers that serve our sites.
3. Essential cookies#
These are required for the sites to work, signing in, keeping your session, and protecting the platform. They cannot be switched off in our settings, though you can block them in your browser (parts of the product, such as staying signed in, will stop working).
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| cashsdk_session | .cashsdk.com (first-party) | Keeps you signed in across CashSDK sites after passwordless sign-in | 30 days |
| cashsdk_consent | .cashsdk.com (first-party) | Remembers your analytics choice so you are asked only once (EEA, UK, and Switzerland) | 180 days |
| __cf_bm | Cloudflare | Bot detection and network security on traffic served through Cloudflare | About 30 minutes |
Depending on how a request is routed, our infrastructure providers may set equivalent short-lived security cookies; they are used only to protect the Service.
4. Analytics cookies#
CashSDK uses Google Analytics 4, provided by Google LLC and Google Ireland Limited acting as our processor, to measure in aggregate how our sites are used: cashsdk.com, the documentation, sign-in, and the dashboard. It runs with Google Consent Mode v2 and its advertising features are turned off: advertising storage is permanently denied everywhere (we do not run ads). Analytics data is retained for 14 months, and Google Analytics 4 does not store IP addresses. In the EEA, the UK, and Switzerland it runs only if you accept it (Section 5).
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes visitors | 2 years |
| _ga_* | Google Analytics | Keeps session state for our Analytics property | 2 years |
| cashsdk_ref | CashSDK | Credits a partner who referred you (holds only their code) | 30 days |
When you arrive through a CashSDK partner's link (cashsdk.com/?p=<code>), the cashsdk_ref cookie on .cashsdk.com keeps that partner's code for 30 days, so a workspace you create is credited to them. It holds the code and nothing else. It follows the same consent as analytics: in the EEA, the UK and Switzerland it is set only after you accept, and withdrawing your consent deletes it.
5. Consent#
If you visit from the EEA, the UK, or Switzerland, we ask for your consent before Google Analytics runs, and it stays off (no analytics cookies, no measurement) unless you accept. We remember your answer for 180 days in the cashsdk_consent cookie on .cashsdk.com, so you are asked once across our sites. You can change or withdraw your choice at any time from the “Cookie settings” link (in the site footer, the documentation sidebar, below the sign-in form, and in the dashboard's settings); withdrawing stops the measurement and deletes the analytics cookies. As a safety net, analytics storage is also denied by default for visitors whose network location is in those regions, until they accept.
Everywhere else, analytics cookies are set when you visit our sites, without a prompt. You can opt out at any time with Google's Analytics opt-out browser add-on, or block or clear the cookies as described in Section 8.
6. Payment pages#
When you add a payment method or manage billing, you are taken to pages hosted by Stripe, our payment processor. Stripe sets the cookies it needs for security and fraud prevention on those pages (for example __stripe_mid and __stripe_sid); they are governed by Stripe's own privacy and cookie policies.
7. Local storage#
We use browser local storage (which is not sent to servers with each request) for preferences such as your dashboard theme (light, dark, or system). It contains no tracking identifiers.
8. How to control cookies#
Every major browser lets you view, block, and delete cookies, globally or per-site, in its privacy settings. You can also install Google's official Analytics opt-out browser add-on to stop Google Analytics measurement in any browser. Blocking analytics cookies has no effect on the product; blocking essential cookies will sign you out and can break sign-in.
9. Do Not Track and Global Privacy Control#
We do not respond to the legacy Do Not Track browser signal, no settled standard for it ever emerged. Because we do not sell or share personal information for advertising, a Global Privacy Control (GPC) signal changes nothing for CashSDK visitors: there is no ad tracking to opt out of, and in consent-required regions analytics is already off by default.
10. Changes to this policy#
If we add or change cookies (for example, if a consent banner ships or a provider changes what it sets) we will update this page and its “Last updated” date, and for material changes we will give notice as described in the Privacy Policy.
11. Contact us#
Questions about cookies or this policy: support@cashsdk.com, or the form at cashsdk.com/contact.