Cookie Policy

1. What this covers

This policy explains how Strata Money uses cookies and similar client-side storage technologies (browser localStorage, sessionStorage, and first-party cookies) when you use our website and app. It should be read alongside our Privacy Policy.

2. Our approach

Strata Money uses only strictly necessary first-party storage to run the service (sign-in, remembering your preferences, and processing payments through our payment provider). We do not use analytics, advertising, tracking, or profiling cookies, and we do not embed third-party analytics scripts (no Google Analytics, PostHog, Plausible, Meta Pixel, or similar). Because we do not set non-essential cookies, no cookie-consent banner is required under UK PECR.

3. Storage we set (first-party)

The following items are set by the Strata Money app itself. They live only in your browser on this device and are never sent to a third-party ad network.

Authentication (strictly necessary)

• sb-<project-ref>-auth-token, browser localStorage, set by our authentication provider to keep you signed in. Persists until you sign out or clear browser storage. Without it you cannot stay signed in.

App preferences and in-session state (strictly necessary / functional)

• strata-theme, localStorage, remembers your light/dark theme choice.
• strata.displayBasis, localStorage, remembers whether you view figures on a weekly, monthly or yearly basis.
• strata.inputStripPinned, localStorage, remembers whether your input strip is pinned in the Workspace.
• strata.activeScenarioId, localStorage, remembers which scenario tab you had open.
• strata.exportNoticeShown, localStorage, records that you have seen the export disclaimer so we do not show it again.
• tracking.planHorizon, sessionStorage, remembers the horizon year you selected on the Tracking page for the current tab session.

4. Third-party storage

Payment processing (strictly necessary, only during checkout)

When you open the subscription checkout, our payment provider (Stripe) embeds its checkout in the page and may set its own strictly-necessary cookies on its own domains (for example to prevent payment fraud). These cookies are governed by Stripe's own cookie notice: see stripe.com/legal/cookies-policy. They are only loaded on pages where checkout is opened.

5. What we do not use

• No analytics cookies or scripts (Google Analytics, PostHog, Plausible, Mixpanel, etc.).
• No advertising, retargeting, or social-media tracking pixels.
• No session-replay or behaviour-recording tools.
• No third-party consent-management platform (none is needed given the above).

6. Controlling storage in your browser

You can block or delete cookies and local storage directly in your browser settings. Blocking the items listed in section 3 will break parts of the service, for example you will not be able to stay signed in, and your theme and preferences will reset.

7. Changes

We will update this policy whenever the list of storage items or our approach to cookies changes. The "Last updated" date at the top of this page reflects the most recent change.

When you visit our subscription checkout, Stripe sets its own strictly necessary cookies to process payments securely and prevent fraud. These cookies are set by Stripe on their own domain and are not controlled by us. For details of the specific cookies Stripe uses and their durations, see Stripe's cookie policy.