Cookie Policy
Every cookie Quathos Invoice sets, what it does, how long it lasts, and how to change your mind.
Version 1.1 In force since Sep 02, 2026 Updated Oct 15, 2026
This policy describes what actually runs in your browser on the Quathos Invoice site and panel. It is part of our Privacy Policy.
1. What we do not do
- No advertising cookies, no ad networks, no retargeting pixels and no conversion tags.
- No analytics script, ours or anyone else’s. The pages load no script from another host.
- No browser fingerprinting, no session replay and no cross-site tracking.
- No local storage and no session storage: nothing is kept in your browser beyond the cookies below.
2. Cookies we set
All five are first-party cookies, set by the Quathos Invoice site itself. None of them is readable by any other website.
| Cookie | Purpose | Category | Duration |
|---|---|---|---|
| qinv_session | Keeps you signed in. Marked HttpOnly, so no script on the page can read it. | Essential | 12 hours |
| qinv_csrf | Proves that a form submission came from our own pages and not from another site acting in your name. | Essential | 12 hours |
| qinv_consent | Records your cookie choice, the version of the question you answered, and when. | Essential | 180 days |
| qinv_lang | The language you picked in the selector. Written only when you click it. | Preferences | 12 months |
| qinv_theme | Light, dark or system appearance. Written only when you click it. | Preferences | 12 months |
3. The three categories
- Essential: sign-in, CSRF protection and the consent record itself. They are strictly necessary to deliver a service you asked for, so they need no consent. Blocking them in your browser means you cannot sign in.
- Preferences: language and appearance. They are written only by the act of choosing, which is the consent: the click is the request. Nothing is stored if you never touch the selectors, and refusing optional cookies in the banner does not undo a choice you made by clicking.
- Analytics and marketing: none in use today. The categories exist in the banner, switched off, so that the day we adopt any measurement it waits for a choice you already control. It will appear in the table above before it is switched on.
4. Other domains
Our pages embed no third-party content. Signing in with Quathos Account takes you to the identity hub, on its own domain, which sets the cookies its own sign-in requires under its own notice. The download links of the XML and the DANFSe point to our private storage and set no cookie.
5. Your choices
- 1 The banner appears on your first visit and stays until you answer. Continuing to browse is not consent here.
- 2 Accepting and refusing are one click each, side by side. The cookie preferences are linked from every page footer, and changing your mind there is as easy as answering.
- 3 Your browser can block or delete cookies for this site at any time. Deleting the essential ones signs you out.
- 4 If your browser sends a Global Privacy Control signal, we treat it as a refusal of the optional categories, without asking.
6. Changes to this policy
A new cookie, a new purpose or a new party means a new version of this policy. The consent record carries the version of the question you answered, so when it changes materially the banner comes back instead of stretching your earlier answer.
7. Questions
Write to privacy@quathos.com and a person answers in writing.