Cookie notice
Last updated 1 October 2026
The short version
This portal uses only strictly necessary cookies — the ones that keep you signed in and make sign-in safe. It uses no analytics, advertising or tracking cookies, so there is no cookie banner to accept: these cookies are exempt from consent under the Privacy and Electronic Communications Regulations because the service cannot work without them.
Cookies for clients
| Cookie | What it does | How long |
|---|---|---|
| portal_session | Keeps you signed in to the portal. HTTP-only, secure, same-site. | Up to 30 days, or until you sign out (1 hour for a staff preview) |
| portal_pending_email | Remembers your verified email for a moment while you choose between workspaces after signing in. | 5 minutes |
| portal_google_state, portal_google_verifier, portal_google_return_to | Protect the "Continue with Google" sign-in from forgery and bring you back to the page you were on. Only set if you use Google sign-in. | 10 minutes, deleted when sign-in finishes |
Cookies for the firm's staff
Staff who sign in to manage the portal (/admin) use the session cookies of ac-co.ai's single sign-in service (Better Auth). They are strictly necessary for staff sign-in and are not set for clients.
Stored in your browser, not sent to us
- Your light/dark theme choice is saved in your browser's local storage. It stays on your device and is never sent to the portal's servers.
Other companies' cookies
The portal itself loads no third-party scripts. If you choose "Continue with Google" or pay an invoice, you are taken to Google's or Stripe's own website, which set their own cookies under their own notices.
Managing cookies
You can delete cookies in your browser settings at any time. If you block the cookies above you will not be able to stay signed in.