Cookies
Last updated 12 October 2026. Draft pending legal review.
Kash uses only cookies that are strictly necessary to log you in and keep your account safe, so we do not ask for cookie consent. We use no analytics, advertising or tracking cookies.
Cookies we set
The website (kash) and the invoice pages your clients open set no cookies. These are set only by the dashboard, and only once you log in.
| Name | What it does | How long |
|---|---|---|
| kash.session_token | Keeps you logged in | 30 minutes after your last activity, or until you log out |
| kash.session_data | A short-lived copy of your login, so pages load faster | 5 minutes |
| kash.two_factor | Remembers that you are part-way through two-step login | 10 minutes |
| kash.passkey_challenge | Holds the one-time challenge while you add a passkey or log in with one | 5 minutes |
| kash.trust_device | Skips the two-step code on this device, only if you tick “Trust this device for 30 days” | 30 days |
| kash.oauth_state | Protects the Sign in with Google step against forgery | 10 minutes |
| sidebar_state | Remembers whether you collapsed the menu | Until you close the browser |
Your choices
You can block or delete cookies in your browser settings. Without the login cookies you cannot use the dashboard. If we ever add other cookies, we will ask first and update this page.