Cookie and device-storage policy
2026-10-08 · Mohasiba · Kabul, Afghanistan
Cookies, localStorage, sessionStorage, IndexedDB and service-worker caches serve different purposes. Privacy choices on the main app control optional analytics and external diagnostics on that origin.
Necessary and requested storage
Firebase authentication stores a session so you can sign in. IndexedDB and caches support offline records and synchronization; local preferences store choices such as language, theme, selected business and print format. Drafts and device-only demos may contain business data. Security verification and provider sign-in can also use storage. These are separate from optional usage tracking. Clearing all site data can remove unsynchronized work: export and synchronize first.
Optional tracking
On the main app, Google Analytics can use _ga and _ga_* cookies to measure use only after analytics is allowed. External Sentry diagnostics require their separate choice. Both options start off; Reject optional and Allow optional are equally available. We do not enable advertising personalization through this choice. Bill and Nirkh do not initialize this main-app analytics SDK. A legacy domain cookie can appear on a subdomain without proving that subdomain started tracking. Google Analytics is additionally disabled until its stream privacy configuration has been reviewed. Automatic page views are disabled; manual usage events do not include full page URLs, query strings or referrers.
Changing your choices
Use Privacy choices in the main app to review, reject or allow each optional category. Choices are stored on this browser and expire after 180 days; a blocked storage mechanism keeps the current choice only for this tab. Choices are separate on other browsers and devices. Rejecting analytics clears readable legacy _ga cookies for this host and its parent domain and disables subsequent event collection. It cannot retract information already sent or clear inaccessible third-party cookies. Browser controls can remove other cookies.
Third-party interactions
Using Google/Apple sign-in, requesting verification, opening checkout or opening an external support link involves the selected provider and its storage policy. Google-hosted fonts also create requests without setting an analytics preference. Optional analytics consent is not consent to marketing, public record sharing or children's data collection.