Cookies and local storage

Necessary cookies

SIA "JP Accounting office", registration 40103396741, VAT LV40103396741. Rīga, Kristapa iela 2 - 4, LV-1083. info@jpaccounting.lv; +371 67 554 329. Outsourced accountant licence AGL0002064, Valsts ieņēmumu dienests.

Provider: JP Accounting Office. Production names use __Host-. jpacc_access: session up to 1 hour; jpacc_refresh: renewal up to 30 days; jpacc_csrf: cross-site request protection up to 1 hour. Used for portal requests, not advertising.

jpacc_google_oauth: chosen Google login verification up to 10 minutes; jpacc_recent_auth: reauthentication up to 5 minutes; jpacc_recovery_authorization: recovery up to 10 minutes; admin-only jpacc_outlook_oauth: Microsoft connection up to 10 minutes. Relevant cookies are cleared on completion/logout; production uses HttpOnly, Secure, SameSite=Lax.

File and Android sign-in security

__Host-jpacc_file_gateway: JP Accounting Office file-delivery session at the Cloudflare gateway, up to 5 minutes, HttpOnly, Secure, SameSite=None, Partitioned. __Host-jpacc_mobile_google: Android Google sign-in request binding, up to 5 minutes, HttpOnly, Secure, SameSite=Strict. Neither is an advertising cookie.

Theme and Android

After selecting a theme, localStorage jpacc:theme:v1 stores only blue/space until changed or site data cleared. Language follows the URL. Android stores language, theme, mode, icon, onboarding, a protected session and transfer data, not advertising tracking.

Google and optional analytics

reCAPTCHA Enterprise protects authentication actions against bots and fraudulent requests. JP Accounting Office is controller; Google processes reCAPTCHA customer data under Google Cloud terms and the data-processing addendum. Necessary _GRECAPTCHA cookie: Google, www.google.com, path /recaptcha, up to 180 days (verified 2026-10-02), HttpOnly, Secure, SameSite=None. Service changes or browser restrictions may affect storage; expiry can be inspected in browser site-data settings.

Google login is your choice; its site's policies apply, and existing Google cookies may be sent to Google. Website code has no ad pixels or optional visitor analytics. If introduced, separate choices, rejection and withdrawal will precede activation.

Controls

Necessary storage for the requested service does not use advertising consent. Browser controls may delete/block site data, but login, security and saved themes may stop working. Manage Android data in system settings; clearing/uninstalling does not delete the server account. Use the data-rights page for that.