SECTION 1
Cookies we use
Essential cookies — required for the client portal to work. They keep you signed in for the length of your session and protect against cross-site request forgery (CSRF). They do not track you between visits and are deleted when you log out or close the browser. Without them, the portal cannot operate.
Analytics cookies — set by our analytics provider (Plausible Analytics or Vercel Analytics, depending on the page). They produce aggregate traffic data — page views, referrer, country-level location — without identifying individual visitors. They do not follow you across other websites.
SECTION 2
Cookies we don't use
We do not use:
· Facebook Pixel, Meta Conversions API, or any Meta-owned tracker
· Google Ads remarketing or DoubleClick cookies
· LinkedIn Insight Tag
· Hotjar, FullStory, or any session-replay product
· Cross-site advertising trackers of any kind
Nothing on this site builds an advertising profile of you. Nothing on this site is shared with an ad network.
SECTION 3
Local storage and similar
In addition to cookies, the client portal uses your browser's local storage to remember small things like which tab you had open or whether you've dismissed an in-app notice. Local storage stays on your device and is never transmitted to our servers unless you actively use a feature that requires it. You can clear it from your browser's site-data settings.
SECTION 4
How to disable cookies
You can disable or delete cookies in your browser's settings:
· Chrome: Settings → Privacy and security → Cookies and other site data
· Firefox: Preferences → Privacy & Security → Cookies and Site Data
· Safari: Preferences → Privacy → Manage Website Data
· Edge: Settings → Cookies and site permissions → Manage and delete cookies
Disabling analytics cookies has no impact on site functionality. Disabling essential cookies will prevent the client portal from operating — you'll be signed out and unable to sign back in. The marketing pages (everything outside /app) will still work.
SECTION 5
Third-party providers
Our analytics provider operates under their own privacy and security commitments:
· Plausible Analytics — EU-hosted, no cookies in their default configuration; if a cookie is set on a given page it's documented at plausible.io/privacy
· Vercel Analytics — operated by Vercel under their privacy policy at vercel.com/legal/privacy-policy
Any payment processor used in the future for invoice payment may set its own cookies on its own domain — those cookies are governed by that provider's policy.
SECTION 6
Changes to this policy
We update this page whenever we change the cookies on the site. The 'last updated' date at the top reflects the most recent change. Material changes will be flagged in a banner at the top of the homepage for at least 30 days.
SECTION 7
Contact
Cookie or analytics queries: privacy@taxtracker.com.au
