Cookies
Version 2026-11
Draft for legal review. This version is not yet in force, and text in square brackets is still to be decided.
What we set
Everplace uses only cookies it needs to work, so it doesn't ask for consent. There are no analytics or advertising cookies.
| Cookie | What it does | How long |
|---|---|---|
| __session, __client_uat and other __clerk cookies | Keep you signed in (set by Clerk, our sign-in provider) | Until you sign out, or up to [the session lifetime] |
| ep_invite | Holds an invitation while you sign in to accept it | One hour |
| ep_bank_state | Checks a bank connection returned to the page that started it | 30 minutes |
| ep_acct_state, ep_acct_choice | Check an accounting (Xero) connection returned to the page that started it | 30 minutes, 15 minutes |
Other services
Sign-in pages may run Cloudflare's bot check, and payment pages are Stripe's own; each sets the cookies it needs under its own policy.