Cookie Policy
Last updated: 27 September 2026 · Version 1.0
This page lists the cookies and browser storage kesefy.app uses. It supplements the Privacy Policy.
No consent banner, on purpose
EU and Israeli law require consent for cookies that are not strictly necessary. Kesefy sets none: there are no analytics, advertising or social-media cookies, and no third party places anything on your device. Everything below is needed to sign you in or to keep a choice you made. So there is nothing to accept or reject, and the Global Privacy Control signal changes nothing, because nothing is sold or shared.
Cookies we use
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| __Secure-authjs.session-token | Kesefy | Keeps you signed in (HttpOnly, Secure) | 30 days, renewed while you use the app |
| __Host-authjs.csrf-token, __Secure-authjs.callback-url | Kesefy | Protects the sign-in form against cross-site requests and remembers where to return after sign-in | Session |
| tz | Kesefy | Your time zone, so dates render on the day you meant | 1 year |
| kesefy_guest | Kesefy | For guests of a shared trip: a signed token that says which participant you are | While the guest link is used |
Browser storage
Kept in your browser only; it never leaves your device and we cannot read it from our side.
| Key | Purpose |
|---|---|
| theme | Light or dark, as you chose |
| Last account, trip mode, saved FX rates and quick amounts, coupon drafts, guest base currency | Conveniences that remember what you last used, so the next entry starts where you left off |
| Service worker cache | The app’s own files, so it opens offline |
Third parties
The checkout page for paid plans is hosted by Lemon Squeezy, not by us; its cookies are governed by Lemon Squeezy’s policy. Signing in with Google takes you to Google, whose policy applies there.
Managing cookies
You can delete or block cookies in your browser settings. Blocking the sign-in cookie means you cannot stay signed in.