STATUTA
Last updated: 21 August 2026
Small text files stored on your device to maintain sessions and preferences.
Essential (cannot opt out)
Session cookie: keeps you logged in.
Authentication token: Supabase Auth, expires after 7 days inactivity.
CSRF protection cookie: prevents cross-site request forgery.
Invitation cookie: set only if you open a link inviting you to join a team on Statuta. It remembers that invitation until you finish signing up, and lasts 7 days.
Referral credit
statuta_src: a first-party cookie that records how you first arrived at our site: a partner referral code if you followed one, campaign labels from the link you clicked, the site that referred you, and the first page you saw here. It lasts 30 days and we use it for one thing: if you sign up, it tells us which accountant, partner or campaign introduced you, so referrals are credited correctly. It is never shared with anyone. If your browser asks not to be tracked, we store only the referral code.
Analytics
Vercel Analytics: anonymised page views and performance metrics. No personal data collected. Sets no cookies.
PostHog: page-view analytics, hosted in the EU, with identifying details removed before anything is sent. Uses your browser's local storage, not cookies, and is switched off entirely if your browser asks not to be tracked.
Error Monitoring
Sentry: anonymised error session data to help fix bugs.
Payment
Stripe: cookies when making payments. Governed by stripe.com/cookies-policy.
No advertising cookies. No data sold to third parties. Nothing on this site follows what you do on other sites: the statuta_src cookie above records only how you first arrived here, and our analytics set no cookies at all.
Control via browser settings. Disabling essential cookies prevents login and platform use.