Cookie policy · Pennykite

Pennykite sets only the cookies it needs to keep you signed in and to remember choices you made. It uses no advertising or third-party analytics cookies.

Cookies

Cookie	Purpose	Lifetime
`better-auth.session_token` (or `__Secure-better-auth.session_token` over HTTPS)	Keeps you signed in; HttpOnly and SameSite	Seven days, extended while you use the product
Other `better-auth.*` cookies set during sign-in (two-factor and passkey challenges, "remember me")	Complete a sign-in step securely; HttpOnly and SameSite	Minutes, removed when the step completes
`theme`	Remembers your light, dark or system theme so the first paint already matches	One year
`sidebar_state`	Remembers whether you collapsed the app sidebar	Seven days

Other browser storage

These aren't cookies. They stay in your browser and aren't sent to our servers with your requests.

Storage	What it holds	How long
IndexedDB (`cashflow-plan`)	Your plan: balance, paychecks, bills, debts, payoff plan, check-ins and imported transactions, kept separately for each signed-in account	Until you delete it in Preferences or clear your browser's site data
Local storage (`cashflow-draft`)	Numbers you typed into a free calculator before choosing "Save this plan", so a new account can pick them up	Seven days, or until used or dismissed
Session storage (`funnel-view:*`)	A marker so each calculator view is counted only once per browser session	Until you close the tab or window
Local storage (announcement)	That you closed an announcement bar, when one is shown	Until cleared

No consent banner

Everything above is strictly necessary for the service or stores a choice you made, so we don't show a consent banner. The automated browser tests fail if a cookie appears that isn't listed here. If we ever add a non-essential cookie, we'll update this page first and ask for consent where the law requires it.