authjs.session-token
Keeps you signed in to the TimmyHR app.
- Type
- Strictly necessary
- Lasts
- Up to 30 days
- Set
- When you sign in

Try Core or Pro free for 14 days. A card is required, and nothing is charged until the trial ends. View plans
Legal
Last updated: 15 October 2026. What TimmyHR stores in your browser, why, and for how long.
In plain English: the public TimmyHR website sets no cookies at all. Cookies appear only when you sign in to the app, and they are there to keep you signed in and to remember your choices. We do not use advertising, tracking or analytics cookies.
Strictly necessary cookies cannot be switched off, because the app cannot work without them. Functional cookies only remember a choice you made.
authjs.session-token
Keeps you signed in to the TimmyHR app.
authjs.callback-url
Remembers the page you were heading to when you signed in, so you land there.
timmy-locale
Remembers the language you chose in the app.
sidebar_state
Remembers whether the app's side menu is open or closed.
On the live site, which is served over HTTPS, the two sign-in cookies begin with __Secure-. They are never readable by scripts on the page.
If you close the notice at the top of this website, your browser keeps a small note saying so, so the notice does not return on every page. It stays on your device until you clear your browser's site data, and it is never sent to us.
Two companies take part in some parts of the app, and their pages may set their own cookies, which we do not control. Stripe handles card payment on the payment pages, and Google handles sign-in if you choose to sign in with Google. Their cookie policies apply on their pages. Our Privacy Policy lists them among the third parties that help us run TimmyHR.
You can see and delete cookies in your browser's settings, and set it to block them. If you block the two sign-in cookies you will not be able to stay signed in to the app. If you block the functional ones, the app still works; it just forgets your language and menu choices.
Questions about cookies? Contact us. See also our Terms of Service and Security overview.