What cookies does AccDoo use?

AccDoo uses Strict / Necessary cookies (essential for core app features, auth, and security), Functional cookies (to remember preferences such as language and active organization), Analytics / Performance cookies (to monitor and improve performance), and Marketing / Advertising cookies (where applicable for user engagement).

How do I opt out of AccDoo cookies?

You can manage or withdraw your consent at any time through the AccDoo Cookie Preference Center on our website, or by configuring your browser settings to reject non-essential cookies or clear existing cookies.

AccDoo Cookie Policy: How We Use Cookies

1. Introduction

This Cookie Policy explains how AccDoo (“AccDoo”, “we”, “us”) uses cookies and similar technologies on accdoo.ai, our web application, free online tools (including the VAT invoice generator) and related sites (the “Sites”), for visitors everywhere in the world. It should be read with our Privacy Policy, which describes our handling of personal data under the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (“PDPA”), the EU/UK GDPR and ePrivacy rules, the California Consumer Privacy Act (“CCPA”), and other applicable laws.

2. What Are Cookies and Similar Technologies?

Cookies are small text files placed on your device by a website, allowing it to recognise your device, remember preferences and understand usage. We also use related technologies:

Local storage and session storage: browser storage used to keep you signed in, remember interface settings, and (in free tools) hold document drafts on your own device;
Pixels and tags: snippets that measure page visits, email opens and campaign performance;
SDKs: the mobile-app equivalent of cookies.

Cookies may be first-party (set by us) or third-party (set by our providers), and session (deleted when the browser closes) or persistent (remaining until expiry or deletion).

3. Categories of Cookies We Use

3.1

Strictly necessary

Required for the Sites to function: authentication and session management, security (CSRF protection, fraud and bot prevention), load balancing, and remembering your cookie preferences. These cannot be switched off through our banner. Legal basis: necessity to provide the service you request / legitimate interests; consent is not required for these under ePrivacy rules.

3.2

Functional

Remember choices you make — language (including English, Sinhala and Tamil), currency and region display, table layouts, dismissed announcements — for a more personalised experience. Legal basis: consent where required in your region.

3.3

Analytics and performance

Help us understand how visitors use the Sites — pages visited, time on page, errors, and which free tools convert to sign-ups — so we can improve content and product. Data is aggregated wherever possible. Legal basis: consent where required in your region.

3.4

Marketing and advertising

Measure campaigns and, where enabled, show relevant AccDoo advertising on other platforms and limit repetition. These may be set by advertising partners and can track browsing across websites; under the CCPA this may constitute “sharing” for cross-context behavioural advertising, which you can opt out of at any time. Legal basis: consent where required; opt-out elsewhere. We do not run third-party advertising on our own Sites and we do not sell personal information.

4. Consent and Regional Behaviour

4.1

Our cookie banner adapts to your region:

EEA, United Kingdom and Switzerland: non-essential cookies (functional, analytics, marketing) are off by defaultand set only after you opt in. “Reject all” is as easy as “Accept all”, and granular category choices are available;
Sri Lanka and other consent-based jurisdictions:the same opt-in model applies, consistent with the PDPA’s conditions for consent;
United States:Non-essential cookies may load subject to notice, with a clear opt-out via the 'Your Privacy Choices' link. We honor Global Privacy Control (GPC) signals as a valid opt-out of sharing and targeted advertising for that browser, as required by California and other state privacy laws.
Everywhere: your choice is stored in a preference cookie for 12 months, after which we ask again.

4.2

You can change or withdraw consent, or opt out, at any time by opening the preferences. Withdrawal does not affect processing that occurred before it.

4.3

You can also control cookies in your browser — blocking or deleting some or all (see help pages for Chrome, Safari, Firefox or Edge). Blocking strictly necessary cookies will prevent sign-in and use of the application.

4.4

To opt out of specific third-party analytics or advertising cookies you may also use provider tools (for example, the Google Analytics opt-out browser add-on) or industry preference pages: youradchoices.com (US), youronlinechoices.eu (EU), or optout.aboutads.info.

5. Do Cookies Collect Personal Data?

Some cookies process personal data - for example, an IP address or a unique identifier that could be linked to you. Where that is the case, the processing is covered by our Privacy Policy, including your rights of access, rectification, erasure, objection, withdrawal of consent and (where applicable) opt-out of sale/sharing, and the international transfer safeguards described there.

6. Cookies We Set

The lists below reflect the cookies in use as at the “Last Updated” date.

Strictly necessary

accdoo_session— AccDoo (first party) — keeps you signed in to your workspace — Session;
XSRF-TOKEN / csrf_token— AccDoo — protects forms against cross-site request forgery — Session;
cookie_consent— AccDoo — stores your cookie preferences and region — 12 months;
__cf_bm / cf_clearance— Cloudflare — bot detection and site security — 30 minutes to 1 year [if using Cloudflare].

Functional

locale— AccDoo — remembers language preference (English / Sinhala / Tamil / others) — 12 months;
ui_prefs— AccDoo — stores display settings such as theme and table density — 12 months.

Analytics

_ga, _ga_XXXXXXX— Google Analytics 4 — distinguishes visitors and sessions for aggregate usage statistics — up to 24 months [if using GA4].

Marketing

No marketing or advertising cookies are currently set by AccDoo.

7. Third-Party Cookies and International Transfers

Third-party providers named above may process data (such as your IP address and on-site behaviour) as independent controllers or as our processors, and several are located outside your country and outside Sri Lanka. Cross-border transfers are protected as described in the “International Data Transfers” section of our Privacy Policy (PDPA section 26 conditions, EU Standard Contractual Clauses and the UK Addendum, or other recognised mechanisms). Each provider’s own privacy notice contains more detail.

8. Changes to This Cookie Policy

We may update this Policy as our cookies or legal requirements change. The “Last Updated” date shows the latest revision, and material changes will be highlighted through the cookie banner or a notice on the Sites. We review our cookie inventory at least every 6 months.

9. Contact

Questions about this Cookie Policy: privacy [at] accdoo.com, Attn: Data Protection Officer.

How to Complain:If you are located in Sri Lanka, you may lodge a complaint with the Data Protection Authority of Sri Lanka. If you are located within the European Economic Area (EEA), you have the right to complain to your local Data Protection Supervisory Authority. UK residents may contact the Information Commissioner’s Office (ICO). Residents of California or other US states may contact their respective state privacy regulator (such as the CPPA). For all other jurisdictions, please refer to the specific authority listed in the Regional Supplements of our Privacy Policy.