Cookie Policy

AccountFUN is operated by XOMG Limited, 50 Bonham Strand, Sheung Wan, Hong Kong. Cookies store small values in your browser. Local storage persists until cleared; session storage normally ends when a tab closes. We use these technologies to operate sign-in, protect sessions and remember requested settings.

Storage used by the Service

• Authentication: Supabase session cookies (names beginning sb-, sometimes split into numbered parts) keep you signed in. Their browser lifetime is capped at 30 days per write; server-side expiry, sign-out and idle controls can end access sooner.
• Session security: auth-session-start, auth-mfa-trusted, auth-session-locked and auth-idle-limit support session binding, second-factor checks and lock displays. Some security cookies have a browser lifetime of up to 400 days, but they do not extend the server’s 30-day session limit.
• Remember this device: when you choose this option, auth-mfa-device remembers the device for up to 60 days. You can forget remembered devices in account settings.
• Organisation and interface settings: active-org selects your organisation; theme and list settings remember your choices. list-page-size lasts up to one year. Browser storage also synchronises organisation and appearance choices between tabs and retains preferences until replaced or cleared.
• Signup choices: signup-selection remembers your selected plan, billing period, region and pricing version while you complete signup. It lasts up to 30 days and is cleared when your organisation is created. It contains preferences, not payment details, and does not authorise a purchase.
• Cookie choices: cookie-consent records an accept or reject choice for up to one year. The local-storage value cookie-consent-v synchronises that choice between tabs. This records cookie preferences separately from Terms acceptance.
• Short-lived state: sign-in redirects, verification challenges and other security flows may use temporary cookies or session storage to complete the action you requested.
• Abuse prevention: Cloudflare Turnstile processes browser/device signals and may use storage when enabled on sign-in, sign-up, recovery forms. See Cloudflare’s privacy policy for its processing.

Not every visitor receives every item: storage depends on the page, features used and settings chosen. Necessary authentication and security storage supports the Service you request. Preference storage remembers your requested settings. We obtain consent for other storage where applicable law requires it.

Analytics and advertising

No analytics or advertising cookies are currently enabled on the public landing site or AccountFUN app. If that changes, we will update this notice and obtain any required consent before loading them. Connected providers, such as hosted payment or bank-link services, may use their own storage when you visit or activate their services; their notices describe that use.

Managing your choices

Where the app displays a cookie banner, you can accept or reject optional cookies and reopen it through “Cookie preferences”. Rejecting optional cookies does not prevent use of necessary sign-in and security functions. You can also delete or block cookies and browser storage through your browser settings, or change a saved preference in the Service. Blocking necessary storage may prevent login, organisation selection or security checks from working. Browser expiry may be shorter than the maximum periods above.

More information and contact

See our Privacy Policy for processing purposes, disclosures, retention and privacy rights. Questions: support [at] accountfun [dot] com, XOMG Limited, 50 Bonham Strand, Sheung Wan, Hong Kong.