Only essential application cookies.
The current application uses first-party cookies required for authentication and active-company selection.
Authentication cookies
payuphub_access and payuphub_refresh maintain a signed-in session. They are HttpOnly and SameSite=Lax; production responses add Secure.
Company selection
payuphub_company remembers the requested company. It grants no access by itself; the server validates active membership on every load.
Analytics
No non-essential advertising cookie is required by the product. If analytics or marketing technologies are added, consent and this notice must be updated first.