Legal
Cookie Policy
The cookies and browser storage the Degroshi web app uses, and why no consent banner is shown.
In short
- The web app uses a small number of strictly necessary cookies (for signing in, protecting your account and showing dates in your time zone) and browser storage (for your settings).
- There are no advertising, analytics or tracking cookies, and no third-party cookies, apart from what Paddle's own checkout window may use when you choose to pay through Paddle (section 3).
- Apart from one session-only marker explained in section 4, everything is needed to provide the Service you asked for, so no cookie consent banner is shown. This page is the notice.
- The apps for iPhone and Mac do not use cookies.
1. What cookies are
Cookies are small text records a website stores in your browser. Browser storage (localStorage and sessionStorage) works the same way but is read only by the web app, never sent to a server by itself.
2. Cookies we set
All cookies are set by degroshi.com itself ("first-party"). None is set by advertisers or analytics services.
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
__Secure-better-auth.session_token | Keeps you signed in. HttpOnly, SameSite=Lax, sent over HTTPS only. | Up to 7 days, extended while you use the app | Strictly necessary |
__Secure-better-auth.session_data | A short-lived signed copy of your session so pages load without a database lookup. HttpOnly. | 5 minutes | Strictly necessary |
dg_device | A random key that tells this browser apart from other devices you sign in from, so we can email you when someone signs in to your account from a new device (Privacy Policy, section 2.1). Set when you sign in. HttpOnly, SameSite=Lax, sent over HTTPS only. | 400 days | Strictly necessary (security) |
dg_tz | Your device's time zone, so dates are shown in your zone on pages rendered by the server. | 1 year | Functional (necessary for correct dates) |
The sign-in flows with Google and Apple keep their protection state on our server, not in a cookie.
3. Browser storage we use
| Key | Purpose | Storage |
|---|---|---|
i18nextLng | The language you chose (uk or en). | localStorage |
theme | Light, dark or system appearance. | localStorage |
space-storage, currentSpaceId, activeCurrencyCode | The space and display currency you last used. | localStorage |
user-preferences | Display preferences (date and number formats and similar). | localStorage |
transaction-filters | The filters you last applied to the transactions list. | localStorage |
degroshi.hide-balances | Whether you chose to hide amounts on screen. | localStorage |
degroshi.import.session.<space> | The statement import you have open, so you can come back to it. | localStorage |
degroshi.onboarding-tracker.<space>, degroshi.assistant.onboarding-* | Which onboarding steps you have completed or dismissed. | localStorage |
degroshi.assistant.usage-warn.* | That you have dismissed an AI usage warning for the current period. | localStorage |
degroshi:welcome-back:shown, degroshi:celebrated, degroshi:evening-round:last-shown | Which welcome-back cards, celebrations and evening prompts you have already seen, so they are not repeated. | localStorage |
degroshi:app-open | That the app-open event was already counted in this browser session. | sessionStorage |
degroshi:billing:thanked:<checkout> | That Suricate has already thanked you for a purchase, so the thanks is not repeated in this browser session. | sessionStorage |
degroshi.invitations.dismissed | Invitations you dismissed in this browser session. | sessionStorage |
Nothing in browser storage is sent to third parties. The apps keep equivalent settings in their own app storage and your session token in the Keychain.
If you verify a crypto wallet through WalletConnect, the WalletConnect library (by Reown) runs on our page only after you choose it. It keeps its pairing data in your browser storage (an IndexedDB database and keys starting with wc@2:) and talks to Reown's relay to reach your wallet app; the session is closed as soon as the message is signed.
Our pages also load the icon font from Cloudflare's cdnjs and merchant logos from Brandfetch. Like any web request, these show your IP address and browser details to those providers. Neither of them sets cookies on our pages.
When an error happens on a page, the web app sends a report to our own server, which passes it on to Sentry without your IP address or cookies (Privacy Policy, section 2.6). The error-reporting code sets no cookies and stores nothing in your browser.
When you pay for a plan on the web through monobank (if you live in Ukraine), you leave our site for monobank's payment page. monobank's own cookie and privacy policies apply there; no monobank cookie is set on degroshi.com.
If you pay through Paddle (if you live anywhere else), the Plan & billing page loads Paddle's checkout script (Paddle.js) and the scripts it needs from Paddle's servers, and the checkout opens in a Paddle window (a frame served from Paddle's domain) over our page. This happens only when you open Paddle's checkout or follow a checkout link from Paddle's emails. Paddle's privacy notice and its cookie notice apply to that window; any cookies Paddle uses there, for example for the payment and fraud prevention, are Paddle's, and we do not read them.
4. Why there is no consent banner
Under EU law (ePrivacy Directive Art. 5(3)) consent is not needed for cookies and storage that are strictly necessary to provide a service you explicitly requested. Every item above keeps you signed in, protects your account, remembers a choice you made in the app, or keeps the app from showing you the same thing twice. The one exception is degroshi:app-open: a session-only marker, with no identifier in it, that stops one visit from being counted twice in our own product statistics; it is deleted when you close the tab. We use no cookies for advertising, measurement, profiling or cross-site tracking, and no third-party services set cookies on our pages; Paddle's checkout window, which you open yourself to pay, follows Paddle's own notices (section 3).
Ukrainian law does not currently require a cookie banner; the Law of Ukraine "On Personal Data Protection" applies to any personal data in these cookies (your session), which is covered by the Privacy Policy.
If we ever add analytics or other non-essential cookies, we will update this policy and ask for consent first where the law requires it.
5. Managing cookies
You can delete or block cookies in your browser settings. If you block the session cookies you will not be able to sign in. If you block dg_device, every sign-in from this browser counts as one from a new device and we email you about it. Clearing browser storage resets your language, theme and filters to their defaults.
6. Contact
Questions: support@degroshi.com. See also the Privacy Policy. This policy is published in Ukrainian and English; if the two differ, the Ukrainian text prevails.