Last updated 4 October 2026
This application uses one cookie. It exists to keep you signed in, and it is the whole list.
| Name | Purpose | Expires | Type |
|---|---|---|---|
connect.sid, or invoices.sid at an
odisal.com address |
Identifies your signed-in session, so you are not asked to sign in again on every page. | 7 days, or immediately when you sign out | Strictly necessary |
It holds a random identifier and nothing else — no name, no email, no
settings. It is marked HttpOnly (scripts cannot read it),
Secure (sent only over HTTPS) and SameSite=Lax
(not sent from other sites).
If a business takes card payments and you choose to pay an invoice by card, you do so on Stripe’s own page, at a stripe.com address. That page is Stripe’s, not ours, and sets Stripe’s own cookies under Stripe’s cookie policy. Nothing on this site sets a cookie for it.
Under the Privacy and Electronic Communications Regulations, consent is required for cookies except those strictly necessary to provide a service the user has asked for. A cookie that keeps you signed in to a service you deliberately signed in to is the standard example of that exemption.
There is nothing else to consent to. This application sets no analytics, advertising, personalisation or tracking cookies, and no third party sets cookies through it — there are no third-party scripts, fonts, embeds or iframes on any page. If that ever changes, a consent banner will appear before the change does, and this notice will be updated first.
Nothing else is stored in your browser — no localStorage, no tracking identifiers. That cookie is the only thing this site keeps on your device.
You can block or delete cookies in your browser settings. Blocking this one means you cannot stay signed in, and the application will not work — there is no version of it that functions without knowing who you are.