1. What a cookie is
A cookie is a small text file that a website stores in your browser and can read on later visits. Cookies do not run programs, do not read files from your computer and contain no viruses. Besides cookies, the browser may also store information in localStorage — a local store we use, on some screens, to remember minor display preferences (for example the last tab you had open).
2. Our position
Eva-Accounting is a working application, not an advertising website. Every cookie we set is strictly necessary for authentication, security, choosing the company you work on, and the interface language. Under Article 4(5)(a) of Romanian Law no. 506/2004 and Directive 2002/58/EC, cookies strictly necessary to deliver the service requested by the user do not require prior consent. That is why we show no consent banner — but we inform you fully below.
We install no advertising, retargeting or behavioural analytics cookies. We share no identifiers with ad networks. There is no Google Analytics, Meta Pixel or similar tool on the portal.
3. Cookies in use
| Name | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
eva_token | Eva-Accounting | The session token of the signed-in user. Without it you cannot stay logged in. It is marked HttpOnly (not readable from JavaScript) and SameSite=Lax. |
12 hours | Strictly necessary |
eva_cui | Eva-Accounting | The tax ID of the company you are currently working on, so you do not have to re-select it on every page. | 1 year | Strictly necessary |
eva_lang | Eva-Accounting | The interface language you chose (Romanian, English and the other available languages). | 1 year | Strictly necessary (preference) |
eva_idm_cab, eva_idm_auto, eva_idm_target, eva_idm_selrole | Eva-Accounting | Route requests to your practice’s correct accounting instance and control how the console opens (automatic sign-in, target screen, role selection). | Session | Strictly necessary |
eva_storefront_id | Eva-Accounting | The online store you are currently administering, when several connected stores exist. | 1 year | Strictly necessary |
JSESSIONID | iDempiere (the accounting console, on our infrastructure) | The session of the Java application serving the accounting screens. It is discarded when the session ends. | Session | Strictly necessary |
| OnlyOffice session cookies | The document editing service, hosted by us | Keep the editing session for a text document, spreadsheet or presentation alive while the editor window is open. | Session | Strictly necessary |
Cloudflare cookies (e.g. __cf_bm, cf_clearance) | Cloudflare, as protection provider | Distinguish human from automated traffic and block attacks. They are not used for advertising or profiling. | Up to 30 minutes / up to 1 year, depending on the cookie | Strictly necessary (security) |
Online stores hosted on the platform may set additional cookies (shopping cart, payment processor). Those are described in each store’s own policy, as each store is a website separate from this portal.
4. How to control cookies
You can delete or block cookies from your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data;
- Firefox: Settings → Privacy & Security → Cookies and Site Data;
- Edge: Settings → Cookies and site permissions;
- Safari: Preferences → Privacy.
Please note: if you block strictly necessary cookies, authentication stops working — you will not stay signed in, the selected company will not be remembered and the accounting console will not open. Blocking them is not a mere loss of convenience; it prevents using the application at all.
5. No cross-site tracking
We do not track users across websites, we build no behavioural profiles and we sell no browsing data. Server technical logs (IP address, timestamp, requested page, response code) are kept for security and troubleshooting, as described in the Privacy Policy.
6. Changes
If we ever add a cookie that is not strictly necessary, we will ask for your prior consent through an explicit mechanism, and we will update this page first. The last-updated date is shown in the header.
7. Questions
For any question about cookies, write to [email protected].
Provider identity
- Company
- CESIRO TRADING SRL
- Tax ID
- 37705493
- Trade Register
- J01/685/2017 (EUID ROONRC.J1/685/2017)
- Registered office
- Str. Theodor Pallady 5, Alba Iulia, jud. Alba, România
- [email protected]
- Platform
- Eva-Accounting — https://acc.eva-org.com