Cookie policy
Last updated: November 4, 2026. Version 1 of this document.
This policy explains which cookies and browser storage we use, what for, and how you can accept them, reject them or change your mind.
2. Necessary cookies
They are essential for the service to work and do not require your consent. They are ours and are not shared with third parties.
| Name | Purpose | Duration |
|---|---|---|
next-auth.session-token (on HTTPS, __Secure-next-auth.session-token) | Keep you signed in | 12 hours |
next-auth.csrf-token (on HTTPS, __Host-next-auth.csrf-token) | Protect sign-in against forged requests | Browser session |
next-auth.callback-url (on HTTPS, __Secure-next-auth.callback-url) | Return to the right page after signing in | Browser session |
billquill_portal | Keep a client signed in to a company's customer portal | 30 days |
bq_stripe_connect | Protect the connection with Stripe while an administrator authorizes it | 15 minutes |
bq_consent | Store your cookie choice: categories, policy version and date | 24 months |
3. Preferences
They remember options you choose and do not require consent.
| Name | Type | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE | Cookie | Language of the website and the application you chose | 1 year |
4. Analytics (only with your permission)
They help us know how many people visit the public website and which pages interest them. They are set by Google.
| Tool | Cookies | Duration |
|---|---|---|
| Google Analytics 4 (Google Ireland Limited) | _ga, _ga_<id> | 2 years |
5. Advertising (only with your permission)
They measure our advertising campaigns and let us show you relevant ads on other websites. They are set by third parties.
| Tool | Cookies | Duration |
|---|---|---|
| Google Ads (Google Ireland Limited) | _gcl_au, _gcl_aw, _gac_<id> | 90 days |
| Meta Pixel (Meta Platforms Ireland Limited) | _fbp, _fbc | 90 days |
6. Where they are used
Analytics and advertising cookies only load on the public website (home page and these documents), only when the tool is enabled and only if you accept its category. They never load inside the application, on sign-in or signup, in the back office, in a company's customer portal or on quote and payment pages. A category with no enabled tool is not offered.
7. Payment pages
When a client pays an invoice online, they are taken to the secure page of Stripe or PayPal. Those pages are on their own domains and use their own cookies, under their own policies.
8. How you decide
On your first visit we show a notice with «Accept», «Reject» and «Settings», with equal weight. The analytics and advertising categories are off until you turn them on, and nothing that needs your permission loads before you decide.
Your choice expires after 24 months, or earlier if we change the tools or categories: then we ask you again.
9. How to change your mind
Click «Cookie settings» in the footer of the website, of the sign-in page or of the application and change your choice. If you withdraw a permission, we delete that category's cookies on our domain and reload the page so its tools stop working.
10. Record of your choice
To be able to prove your choice, our server stores it: accepted categories, policy version, language, date, IP address and browser. It is not linked to your account and is deleted automatically after 24 months.
11. Transfers
Google and Meta may process their cookies' data outside the EU, in particular in the United States, with the safeguards explained in the privacy policy. If you do not accept their cookies, there is no transfer through them.
12. From your browser
You can also block or delete cookies in your browser settings. If you block the necessary ones, you will not be able to sign in. Some browsers cap cookie lifetimes at about 400 days even if the website asks for longer: then we will ask for your choice again sooner.
13. Changes to this policy
If we change the tools or the categories, we update this page and ask for your choice again.
14. Other language versions
This document is published in English and Spanish. The translation is provided as a courtesy and, in case of discrepancy between versions, the English version prevails.