Cookie Policy
Last updated: October 14, 2026
This Cookie Policy explains the cookies and similar technologies (like local browser storage) that ChalkBill uses, and why.
What are cookies
Cookies are small text files placed on your device by a website. They can be “essential” (needed for the site to function), “functional” (remembering preferences), or “analytics” (helping us understand how the site is used). ChalkBill also uses your browser’s in-memory storage to hold your sign-in session token while you’re actively using the app; that token is not written to a cookie or to persistent local storage.
Cookies and storage we use
| Name | Purpose | Type | Duration |
|---|---|---|---|
| refreshToken | Keeps you signed in by issuing a new short-lived access token without re-entering your password. | Essential | 30 days (httpOnly, not readable by page scripts) |
| oauth_state | Short-lived value used only during Google sign-in to confirm the request wasn’t forged (CSRF protection). | Essential | 10 minutes (httpOnly) |
| Vercel Web Analytics beacon | Aggregate, privacy-focused page-view analytics for the ChalkBill website. | Analytics | Session-based; no persistent cross-site cookie is set by this tool |
Heads up: ChalkBill currently loads Vercel Web Analytics on every page load without asking for consent first. If you’re visiting from a region that requires consent before non-essential cookies or trackers run (such as the EU/UK), be aware this analytics script is not yet gated behind a consent choice.
Third-party cookies
If you pay for a ChalkBill subscription, Stripe’s checkout and billing portal pages may set their own cookies while you’re on Stripe’s domain, governed by Stripe’s own privacy and cookie practices. If you sign in with Google, Google may set cookies on its own domain during the sign-in flow, governed by Google’s own policies. We don’t control these third-party cookies.
Managing cookies
Most browsers let you block or delete cookies through their settings. Blocking the essential `refreshToken` cookie will sign you out more often, since your session won’t be able to refresh automatically. You can also use your browser’s privacy settings or extensions to limit analytics scripts like Vercel Web Analytics.
Changes to this policy
We may update this Cookie Policy as the Service changes. Material changes will be reflected in the “Last updated” date at the top of this page.
Contact us
Questions about this policy? Email support@chalkbill.com.