BillMateCookie and similar technologies notice
Version of 20 October 2026
This notice, under Art. 122 of the Italian Privacy Code, the ePrivacy Directive 2002/58/EC and the Italian DPA’s cookie guidelines (10 June 2021), explains what BillMate stores in your browser.
BillMate only uses technical cookies and storage that are necessary to operate and do not require consent. It uses no profiling, advertising, statistics or tracking cookies, neither its own nor third-party. The banner lets you choose whether to allow optional Google services to load.
1. Technical cookies (always on)
- bm_session (on the secure site: __Host-bm_session) — keeps you signed in. Duration: up to 30 days. First-party, HttpOnly.
- bm_oauth — protects the return from Google sign-in. Duration: 10 minutes.
- bm_lang — remembers your chosen language. Duration: 1 year.
- bm_consent — remembers your banner choice. Duration: 6 months.
- bm_admin — administration area only, not used by users. Duration: 8 hours.
2. Local browser storage
- Light/dark theme (localStorage: bm-theme).
- Device encryption keys for payment methods (IndexedDB: billmate-e2ee). They never leave the device, unless you turn on the Google Drive backup.
- Queue of expenses created offline (IndexedDB), removed as soon as they are sent, and a copy of visited pages for offline reading (service worker cache), cleared when you sign out.
- Small session service data (sessionStorage: bm-e2ee-sync, bm-restore-gesture).
3. Optional third-party services
If you turn on the key backup on Google Drive, and only after consenting in the banner, the page loads the Google Identity Services script (accounts.google.com) and talks to the Google Drive API. Google may set its own cookies and process data under its own notice (policies.google.com). Without consent nothing from Google is loaded.
Signing in with Google redirects you to Google’s site: you do that by pressing the button, and it is governed by Google’s notice.
4. How to change or withdraw your choice
You can reopen the preferences at any time from the “Cookie preferences” link in the footer and in your profile. The choice is asked again after 6 months or if this notice changes. You can also delete cookies from your browser settings; you will then need to sign in again.
5. Controller
Data controller: the operator of the BillMate service (billmate.it). To exercise your rights you can also delete your account from your profile at any time. For other processing see the privacy notice.