Cookie Policy
Everything Stockaroo stores on your device, what each item is for, and how to change your mind. The list below is complete.
- Last updated
- 10 September 2026
- Effective
- 10 September 2026
- Version
- 1.0
Contents
This document is a draft awaiting legal review. The technical detail is accurate to how Stockaroo works today, but it has not been checked by a solicitor.
What we use today
Stockaroo currently sets no analytics, advertising or tracking cookies. Not one. The only cookie we set is the one that keeps you signed in.
If that ever changes, the consent banner will ask before anything is stored, and this page will be updated before it does.
UK law, specifically the Privacy and Electronic Communications Regulations, splits storage on your device into two kinds. Things a service cannot work without are permitted automatically. Everything else needs your consent first, and refusing must be as easy as agreeing.
We have taken the narrow reading of "cannot work without", which is why this page is short.
Strictly necessary cookies
These keep the service functioning. They cannot be switched off, and consent is not required for them.
| Name | Purpose | Expires |
|---|---|---|
| token | Keeps you signed in. Contains a signed session token and nothing else. Marked HttpOnly so scripts cannot read it, Secure so it only travels over HTTPS, and SameSite=Lax so it is not sent from other sites. | 24 hours, or 30 days with "Remember me" |
| stockaroo_consent | Remembers whether you accepted or rejected optional cookies, so the banner stops asking. Stores only your choice and the date you made it. | 6 months |
The consent record is itself strictly necessary: without it we could not honour your decision, and we would have to ask on every page.
Things stored in your browser
Cookies are not the only way a site stores data on your device, and the law treats browser storage the same way. For completeness, here is everything Stockaroo keeps in local storage.
| Key | Purpose | Cleared |
|---|---|---|
| saas-theme | Remembers whether you chose light or dark mode. | When you clear site data |
| rememberedEmail | Pre-fills your email on the sign-in form, only if you ticked "Remember me". | When you sign in without the box ticked |
| authToken | A copy of your session token, used by the dashboard to call the API. | When you sign out |
| lastInventorySyncTime | Remembers when your inventory last synced, so the page can show "last updated". | When you clear site data |
Clearing your browser's site data removes all of these. Doing so signs you out and resets your theme preference; nothing else is affected, and no account data is lost.
Optional cookies
There are none at present. This section exists so that the moment we add analytics, it has to be described here first.
When we do add them, they will be:
- Off by default, and set only after you accept.
- Described in the table format above, with names and expiry times.
- Refusable with a single click, in a banner where accepting and refusing look and cost the same.
Refusing optional cookies will never reduce what the service does for you. We do not gate features behind consent, and we do not re-ask visitors who have already said no.
Changing your choice
You can change your mind at any time:
- Use theCookie settings link in the footer of any page to reopen the banner.
- Clear this site's data in your browser, which resets everything on this page.
- Set your browser to block cookies entirely. Note that blocking the
tokencookie will stop you signing in, because there is no other way to keep you signed in between pages.
Third parties
Some pages load resources from other services: Stripe for payment, and content delivery networks for fonts and scripts. These can see your IP address as part of serving the request, which is unavoidable for any resource loaded over the internet.
Stripe sets its own cookies during checkout for fraud prevention. Those are governed by Stripe's cookie policy, and they are strictly necessary to taking a payment safely.
We embed no social media widgets, no advertising pixels and no session recording. Nothing on Stockaroo reports your behaviour to a third party.
Contact
Questions about this policy:privacy@stockaroo.com
See also our Privacy Policy and Terms of Service.