Cookie Policy

Cookies are small text files a site stores on your device. We also use closely related technologies — local storage, session storage and, for the installable app, a service worker cache — which this policy covers in the same way.

Some are set by us ('first-party'). A small number may be set by providers we use to run the Service ('third-party'), for example our authentication provider.

These are required to deliver the Service you asked for, so they do not need consent and cannot be switched off without breaking sign-in:

• Authentication and session: keeps you signed in securely between visits and page loads, and protects against request forgery.
• Consent record: stores the cookie choice you made, and when, so we do not ask you again on every visit.
• Security and load balancing: short-lived items used to route requests and to detect abuse.
• Offline app cache: the service worker cache that lets the installed app open quickly and work when your connection drops.

These only run if you press Accept:

• Product analytics: aggregated, privacy-respecting measurement of which screens are used and where people get stuck, so we can improve the app.
• Non-essential convenience storage: remembering interface choices such as your last dashboard filter across devices and sessions.

We do not use advertising, retargeting, social-media tracking or data-broker cookies, and we do not sell or share your information for cross-context behavioural advertising.

Rejecting is a genuine, equal choice — the Reject and Accept buttons are presented identically and rejecting is never buried behind extra steps.

If you reject, we do not set any optional cookie or storage item, we immediately clear any non-essential items already present on your device, and no analytics are loaded at all.

The Service continues to work completely: you can sign in, check in, view every chart and calendar, download reports, and use all features on your plan. The only difference is that some interface preferences are remembered for the current session rather than long term.

Session items are deleted when you close your browser. Sign-in tokens are refreshed regularly and expire automatically after a period of inactivity. Your consent record lasts up to 12 months, after which we ask again. Optional analytics identifiers, if you accept them, are short-lived and never used to identify you personally.

You can change your choice at any time using the buttons at the bottom of this page. Choosing to reject also clears optional items already stored.

You can additionally block or delete cookies in your browser settings, or use private browsing. Blocking strictly necessary cookies will stop you being able to sign in.

Where your local law requires it — for example under the EU ePrivacy rules, UK PECR, or state privacy laws in the US — we treat a browser-level Global Privacy Control signal as a valid rejection of optional cookies.

How we handle personal data more broadly, including your access and deletion rights, is set out in our Privacy Policy. If you have a question about cookies, please contact us through the contact page and we will answer it.