Cookie Policy
Last updated October 1, 2026Effective October 1, 2026
This Cookie Policy is part of our Privacy Policy and describes the cookies and similar technologies Accountable uses on https://accountable.im and in the Accountable app. Capitalized terms not defined here have the meanings in the Privacy Policy.
In short: Accountable uses the cookies it needs to sign you in, keep your account secure and take payments, first-party cookies from our web analytics tool, DataFast, that count visits and show which pages and campaigns bring people to https://accountable.im, and, for visitors outside the European Economic Area, the United Kingdom and Switzerland, advertising cookies from Meta and Google that measure our ads. You can turn the advertising cookies off on Your privacy choices, and we honor Global Privacy Control.
What cookies are
A cookie is a small file of letters and numbers that a website stores in your browser. It lets the website remember something between requests, such as the fact that you are signed in. Websites can also keep information in your browser's local storage or session storage, which work in a similar way but are never sent to the server automatically. This policy covers all of these.
The cookies we use
Strictly necessary cookies
These cookies are required for Accountable to work. They sign you in, keep your session secure and let you pay. They are always on, because the Services cannot work without them; you can block them in your browser settings, but then you will not be able to sign in.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
__Secure-better-auth.session_token | accountable.im | Keeps you signed in, and ends when you sign out or a session is revoked. HttpOnly, Secure, first-party. | 30 days | HTTP cookie |
__Secure-better-auth.* sign-in flow cookies (such as state and two_factor) | accountable.im | Protect a sign-in with Google, single sign-on or a two-factor code while it is in progress. | Minutes, or until sign-in finishes | HTTP cookie |
__stripe_mid, __stripe_sid | Stripe | Set by Stripe on the checkout form in the app to prevent payment fraud. Only when you open checkout. | 1 year; 30 minutes | HTTP cookie |
ads_opt_out | accountable.im | Set only if you turn off sharing on Your privacy choices: remembers that the advertising tags must not load in this browser. | 1 year | HTTP cookie |
__cf_bm | Cloudflare | May be set by our hosting provider to tell people from bots and protect the Services from abuse. | 30 minutes | HTTP cookie |
Preferences kept in your browser
These are not cookies and are never sent to us. They remember choices you make in the app on this device.
| Name | Purpose | Duration | Type |
|---|---|---|---|
accountable:theme | Light, dark or system appearance | Until you change it | Local storage |
accountable:hide-balances | Hides balances while you share your screen | Until you change it | Local storage |
accountable:last-company | Opens the company you used last | Until you clear it | Local storage |
accountable:attribution | If you arrived from a link with campaign tags (such as utm_source), keeps them until you create an account, so the account records which campaign brought you. Never shared with advertisers. | Until the tab closes or you sign up | Session storage |
Analytics cookies
Accountable uses DataFast to count visits and see which pages and campaigns bring people to https://accountable.im. Its script sets the first-party cookies below and sends the page address, referrer, campaign tags, browser and device type, and approximate location to DataFast, and, once you are signed in, your name, email address and profile photo so your visits form one profile. It does not read your books or anything you type. We do not use DataFast's data for advertising and we do not share it with advertisers.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
datafast_visitor_id | accountable.im (set by DataFast's script) | A random identifier that lets us count a returning visitor once. | 1 year | HTTP cookie |
datafast_visitor_first_seen_at | accountable.im (set by DataFast's script) | The date of the visitor's first visit. | 1 year | HTTP cookie |
datafast_visitor_session_count | accountable.im (set by DataFast's script) | How many visits this browser has made. | 1 year | HTTP cookie |
datafast_session_id | accountable.im (set by DataFast's script) | A random identifier for the current visit. | 30 minutes | HTTP cookie |
Advertising cookies
Accountable uses the Meta pixel and the Google Ads tag to measure our own ads on Facebook, Instagram and Google, and to show those ads to people likely to want Accountable. When they load, they tell Meta and Google which pages you visit, when you sign up and when you start a trial, with your device and the cookie identifiers below. For sign-up, checkout and trial events, our servers also send Meta the same event with a one-way hash (SHA-256) of your email address and the _fbp and _fbc values below, under the same rules. They never receive your books, your name, your readable email address or any amount. Meta and Google may combine this with what they know about you from their own services, under their own privacy policies.
These tags load only on accountable.im, and never:
- for visitors in the European Economic Area, the United Kingdom or Switzerland (we check the country your connection comes from, and if we can't tell, we don't load them);
- when your browser sends a Global Privacy Control signal;
- after you turn sharing off on Your privacy choices; or
- on pages whose address is a private link, such as a hosted invoice, a W-9 form or a shared report.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_fbp | accountable.im (set by the Meta pixel) | A random identifier for this browser, so Meta can tell which visits and sign-ups came from our ads. | 90 days | HTTP cookie |
_fbc | accountable.im (set by the Meta pixel) | Only when you arrive from a Meta ad: the click identifier of that ad. | 90 days | HTTP cookie |
_gcl_au | accountable.im (set by the Google tag) | A random identifier for this browser, so Google can tell which sign-ups came from our ads. | 90 days | HTTP cookie |
_gcl_aw | accountable.im (set by the Google tag) | Only when you arrive from a Google ad: the click identifier of that ad. | 90 days | HTTP cookie |
Google's own cookies, such as IDE, test_cookie, ar_debug and NID | Google (doubleclick.net, googleadservices.com, google.com) | Set on Google's own domains, not ours, to measure ads and limit how often you see them. Google lists them at https://business.safety.google/adscookies. | From 15 minutes up to 13 months, or 24 months outside the EEA and UK (IDE) | Third-party HTTP cookie |
| Meta's own cookies | Meta (facebook.com, instagram.com) | If you are signed in to Facebook or Instagram in the same browser, Meta's own cookies let it link our ad events to your account. Meta describes them at https://www.facebook.com/privacy/policies/cookies. | Set by Meta | Third-party HTTP cookie |
Cookies on other sites
When you sign in with Google, connect a bank through Plaid or Teller, or connect QuickBooks, Xero or Slack, you are taken to that company's site or window, which sets its own cookies under its own policy.
Your choices
Most browsers let you see, block and delete cookies and site data in their settings. Blocking the strictly necessary cookies will stop you from signing in. Clearing site data resets the preferences above. Blocking the analytics or advertising cookies does not affect how Accountable works.
To stop sharing your activity on this site with Meta and Google for ads, turn it off on Your privacy choices. That sets the ads_opt_out cookie on accountable.im for one year (strictly necessary, because it remembers your choice), and the advertising tags stop loading in that browser. We treat a Global Privacy Control signal the same way, with nothing for you to do. Turning sharing off does not delete what Meta and Google already received; you can manage that in your Meta and Google ad settings.
Changes and contact
If we add a cookie, we will update this policy before we set it, and every earlier version stays readable from the version history below. Where the law requires your consent for the analytics or advertising cookies (for example in the EU and UK), we will ask for it before we set them; today the advertising tags do not load there at all. Questions: privacy@accountable.im.
Version history
- October 1, 2026Effective October 1, 2026Added the Meta pixel's and the Google Ads tag's advertising cookies, which load only outside the EEA, the UK and Switzerland, and the ads_opt_out cookie that Your privacy choices sets to turn them off.
- September 29, 2026Effective September 29, 2026Added DataFast's four first-party analytics cookies, with names and lifetimes.
- September 28, 2026Effective September 28, 2026First published version.
Questions about this document: legal@accountable.im.