Cookie Policy
One cookie. That's it. Here's exactly what it is and why it's there. — Siki 🦉
Last updated: July 2026
The one cookie we set
| Name | sikizana_session |
| Purpose | Keeps you connected to the backend so your chat history, findings, and Xero connection stay linked to your browser across page loads. |
| Type | First-party, strictly necessary |
| Lifetime | 30 days sliding — each visit refreshes the expiry. Inactive for 30 days and it expires on its own. |
| Attributes | HttpOnly (JavaScript can't read it), SameSite=Lax (blocks cross-site attacks), Secure in production (HTTPS only). |
| Contains | A random session ID. No personal data, no email, no accounting data — just an opaque token that lets the server recognise you across requests. |
What we don't use
- No advertising or tracking cookies (Google Ads, Meta Pixel, etc.)
- No third-party analytics cookies
- No social media embed cookies
- No cookie consent banner — because there's nothing to consent to. The one cookie is strictly necessary for the app to function.
Browser storage
Sikizana also uses localStorage on your device to remember your persona preference (Siki or Zana), saved findings, and chat drafts between visits. This is browser-local storage, not a cookie — it never leaves your device. Clearing your browser data removes it.
Managing the cookie
Because the session cookie is strictly necessary, disabling it means Sikizana can't keep you connected — every page load starts a fresh session. You can delete it anytime from your browser settings, or use Delete my data on the Account page, which revokes the Xero connection and erases all server-side data (the cookie itself is dropped when you clear browser data).
Contact
Questions about cookies? Email [email protected].