Legal
Cookie Policy
Last updated: 29 April 2026
AssuranceLens uses only the cookies it strictly needs to keep you signed in and to keep the application secure. We do not use advertising cookies, third-party trackers, or cross-site profiling, and no consent banner is required for strictly-necessary cookies under PECR / ePrivacy.
Cookies we set
| Name | Purpose | Duration |
|---|---|---|
next-auth.session-token | Authenticated session, set by NextAuth after successful sign-in. HttpOnly, Secure, SameSite=Lax. | 30 days (rolling) |
next-auth.csrf-token | CSRF protection for authentication forms. | Session |
next-auth.callback-url | Stores the page to return to after sign-in. | Session |
Third-party cookies
Stripe sets its own cookies on the billing pages it hosts; these are governed by Stripe's cookie policy. Our pages do not embed third-party scripts beyond those required for payment processing.
How to refuse cookies
You can refuse cookies in your browser settings, but the application will not function: the session token is required to stay signed in. For sign-out, use the in-app menu rather than clearing cookies.