Cookie Policy

1. Strictly necessary

These make the site work at all and cannot be switched off. Under UK and EU rules they do not require consent, because without them you could not stay signed in.

• Session cookie — set when you sign in, and used to keep you signed in as you move between pages. It is removed when you sign out.
• CSRF token — a short-lived value that proves a form submission came from Invco and not from another site.
• invco-consent — remembers whether you accepted or declined analytics cookies, so the banner stops asking. Stored in your browser's local storage rather than sent to us.

2. Analytics — off until you accept

We use Google Analytics 4 to see which pages people read and where they get stuck. It is wired to Google Consent Mode: analytics storage defaults to denied before you make a choice, so no analytics cookies are written until you press Accept.

While consent is denied, Google Analytics still receives cookieless pings, which gives us rough aggregate numbers without identifying you or storing anything on your device. If you accept, the usual _ga and _ga_* cookies are set to recognise a returning browser and last up to two years.

3. What we don't do

• No advertising or retargeting cookies.
• No cross-site tracking pixels, and no selling of any data to advertisers.
• No fingerprinting to work around a declined banner.

4. Third-party pages

When a customer pays an invoice, the card details are entered on a checkout page hosted by SumUp, not by Invco. That page sets its own cookies under SumUp's cookie policy, which we do not control. Invco receives only the outcome of the payment.

5. Changing your mind

Clearing your browser's site data for invco.pro removes the stored choice and the banner will appear again. You can also block or delete cookies in your browser settings at any time — declining analytics does not limit anything in the product.

6. Contact

Questions about cookies or anything else on this page: privacy@invco.pro or support@invco.pro.