Skip to main content
POST
Accept privacy terms

Authorizations

aropay_session
string
cookie
required

Browser session cookie minted by POST /auth/login (or passkey login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked Session-only accept only this credential and return 403 session_required for API keys.

Body

application/json
version
string
required

terms.current.version from GET /me/terms.

Required string length: 1 - 40
contentHash
string
required

terms.current.contentHash from GET /me/terms (sha256, lowercase hex).

Pattern: ^[0-9a-f]{64}$

Response

Accepted (or already accepted); required is now false.

ok
any
required
data
object
required