Cookies & Browser Storage

1. Essential authentication

The app uses accessToken and refreshToken cookies for signed-in sessions. Access tokens normally last about 15 minutes and refresh sessions up to seven days, subject to logout, revocation and security checks. Production cookie security settings depend on the deployed HTTPS/domain arrangement. Blocking these cookies prevents reliable sign-in.

2. Local and session storage

The localStorage key ahb-color-theme stores your light/dark preference until you change or clear it. Payment/checkout flows use sessionStorage request keys to reduce accidental duplicate invoice/payment actions during a tab session; these are not your payment PIN or sign-in password.

The landing promotion can appear again on a full page refresh. Closing it is kept in memory for that page instance, not a tracking profile. Clearing browser storage can reset preferences or retry protection; check invoice history before retrying a payment.

3. Optional tracking and controls

The app code currently does not add an advertising pixel or third-party analytics programme. Hosting/security providers may still generate essential operational logs under their arrangements. If optional tracking is introduced, the notice and any required choice will be updated before it is enabled.

You can manage cookies/storage in your browser and change the theme in the site. An optional-marketing consent is not bundled with registration or a payment acknowledgement. See the Privacy Notice or contact support for questions.