# Cookie policy
version: 1.0
updated: 2026-08-12
description: The complete list of cookies and browser storage used by CowriePay, and why there is no consent banner.

## 1. Purpose and scope
This policy describes the cookies and other browser storage (local storage, session storage) used by the www.cowriepay.io website and by the CowriePay dashboard. It complements the [Privacy policy](/legal/privacy).
We list everything rather than summarise by category: the two tables below are exhaustive as at the date of last update.

## 2. On the www.cowriepay.io website
Item | Origin | Purpose | Lifetime and trigger
cpay_locale | cowriepay.io (us) | Remember the language you chose | 12 months. Set only if you use the language switch.
Audience measurement | analytics.cowrie-x.com (our servers) | Traffic statistics: pages viewed, referring page, device and browser type, language, approximate country | No cookie and no storage in your browser. A technical visit identifier, renewed every day, is computed on our servers; your IP address is not retained.
Conversation identifier | support.cowrie-x.com (our servers) | Find your support conversation again | Set only if you open the chat window. As long as you do not click, no support code is loaded at all.
Anti-bot check | challenges.cloudflare.com (Cloudflare, Inc.) | Protect the contact form against automated submissions | Contact page only, short lifetime.

## 3. On the CowriePay dashboard
The first two items are strictly necessary: without them you cannot sign in or stay signed in.
Item | Type | Purpose | Lifetime
cpay_rt | Cookie, not readable by page JavaScript, sent only to our own domain | Renew your session without asking for your credentials again | 7 days.
cpay_at | Local storage | API access token for your working session | Cleared on sign-out.
cpay_network_mode | Local storage | Remember whether you are viewing the Sandbox or the production environment | Until you clear site data.
Support | support.cowrie-x.com (our servers) | Support inside the signed-in area, linked to your account | Signed-in area only.
Anti-bot check | challenges.cloudflare.com (Cloudflare, Inc.) | Protect sign-in and account creation against automated attempts | Sign-in, sign-up and access-request pages, short lifetime.

## 4. What we do not use
- No advertising cookies.
- No targeting or retargeting cookies.
- No tracking of your browsing on other websites.
- No sharing or sale of browsing data for commercial purposes.
- No session recording for behavioural analysis.
Our audience measurement and our support tool run on our own servers: they are not third-party services, and the corresponding data does not leave our infrastructure. The only genuine third party is the Cloudflare anti-bot check, limited to forms.

## 5. Why there is no consent banner
A consent banner exists to obtain your agreement before placing non-essential trackers in your browser, in practice advertising or cross-site tracking. We place none: our traffic measurement puts nothing in your browser and serves neither advertising nor tracking of your browsing elsewhere.
The only items stored are either strictly necessary for the service to work, or the direct consequence of an action you choose to take: picking a language, or opening the chat window. If you do neither, your browser keeps nothing on our account.
Should we ever introduce a non-essential tracker, we would obtain your prior consent and this page would be updated before it went live.

## 6. Your choices
- Your browser lets you block or delete cookies and clear site data, including local storage. On the dashboard this ends your session and you will need to sign in again.
- On the website, simply not opening the chat window leaves no support-related trace at all. In the signed-in area, support is loaded with the page. In both cases, clearing site data resets the conversation identifier.
- No action is needed for audience measurement, since it stores nothing.

## 7. Changes
This policy is updated whenever anything listed above changes. The date of last update appears at the top of the page.

## 8. Contact
For any question about cookies and similar technologies: privacy@cowriepay.io.