Cookie Policy

1. What this policy covers#

This Cookie Policy explains how CashSDK uses cookies and similar technologies (such as browser local storage) on cashsdk.com and its subdomains — including app.cashsdk.com (the dashboard), auth.cashsdk.com (sign-in), and docs.cashsdk.com (documentation). It supplements our Privacy Policy at cashsdk.com/privacy.

It covers our own websites and dashboard. Cookies or storage that a customer's app or website sets are the customer's responsibility, under their own policies.

2. What cookies are#

Cookies are small text files a site stores in your browser. Session cookies expire when you close the browser; persistent cookies last until a set expiry date. First-party cookies are set by the domain you are visiting; third-party cookies are set by another domain. We use first-party cookies, plus a small number set by the infrastructure and payment providers that serve our sites.

3. Essential cookies#

These are required for the sites to work — signing in, keeping your session, and protecting the platform. They cannot be switched off in our settings, though you can block them in your browser (parts of the product, such as staying signed in, will stop working).

Depending on how a request is routed, our infrastructure providers may set equivalent short-lived security cookies; they are used only to protect the Service.

4. Analytics cookies#

The marketing site at cashsdk.com uses Google Analytics 4 to understand which pages help and which don't. It runs with Google Consent Mode v2: advertising storage is permanently denied everywhere — we do not run ads — and analytics storage is denied by default for visitors in the EEA, the UK, and Switzerland, so no analytics cookies are set there. Google Analytics runs on the marketing site only.

5. Consent#

In regions where analytics cookies require opt-in consent — the EEA, the UK, and Switzerland — analytics storage is denied by default, and we currently show no consent banner, which means analytics simply stays off there. If we add a consent prompt in the future, analytics in those regions will remain off until you say yes.

Everywhere else, analytics cookies are set when you visit the marketing site; you can block or clear them at any time as described in Section 8.

6. Payment pages#

When you add a payment method or manage billing, you are taken to pages hosted by Stripe, our payment processor. Stripe sets the cookies it needs for security and fraud prevention on those pages (for example __stripe_mid and __stripe_sid); they are governed by Stripe's own privacy and cookie policies.

7. Local storage#

We use browser local storage — which is not sent to servers with each request — for preferences such as your dashboard theme (light, dark, or system). It contains no tracking identifiers.

8. How to control cookies#

Every major browser lets you view, block, and delete cookies, globally or per-site, in its privacy settings. You can also install Google's official Analytics opt-out browser add-on to stop Google Analytics measurement in any browser. Blocking analytics cookies has no effect on the product; blocking essential cookies will sign you out and can break sign-in.

9. Do Not Track and Global Privacy Control#

We do not respond to the legacy Do Not Track browser signal — no settled standard for it ever emerged. Because we do not sell or share personal information for advertising, a Global Privacy Control (GPC) signal changes nothing for CashSDK visitors: there is no ad tracking to opt out of, and in consent-required regions analytics is already off by default.

10. Changes to this policy#

If we add or change cookies — for example, if a consent banner ships or a provider changes what it sets — we will update this page and its “Last updated” date, and for material changes we will give notice as described in the Privacy Policy.

11. Contact us#

Questions about cookies or this policy: support@cashsdk.com, or the form at cashsdk.com/contact.