Skip to content
en
Menu

Cookie Policy

The strictly necessary cookies and browser storage we use, and the optional analytics you can turn on or off.

Last updated
Effective
On this page

This policy explains how e-Passage uses cookies and similar technologies such as your browser’s local storage. It should be read with our Privacy Policy.

1.The short version#

In short: We use only strictly necessary cookies, to sign you in and keep your account secure. We don’t use advertising cookies. Analytics (our own visit counts and PostHog) are optional and stay off unless you accept them.

2.What cookies are#

Cookies are small text files a website stores in your browser. Local storage is a similar feature that keeps information on your device. Some are “strictly necessary” because a service can’t work without them; others are used for analytics or advertising. We use the first kind, plus optional analytics only if you agree.

3.Cookies we use#

Most of these cookies are set by our sign-in system. They aren’t set when you just browse the public website without signing in. On our live site their names start with __Secure-, which means browsers send them only over encrypted connections. They are also marked so that scripts on the page can’t read them.

Sign-in sessionbetter-auth.session_tokenKeeps you signed in and protects your account. Set only when you sign in.Duration:7 days, renewed while you use the app
Two-step verification in progressbetter-auth.two_factorRemembers that you’ve entered the first sign-in step while you enter your two-step verification code.Duration:10 minutes
Trusted devicebetter-auth.trust_deviceOnly if you choose “trust this device”: skips the two-step verification code on this device.Duration:30 days
Google sign-in protectionbetter-auth.statebetter-auth.oauth_stateProtects the Google sign-in process against forgery. Set only if you sign in with Google.Duration:Minutes
Your time zoneep_tzYour browser’s time zone (for example Europe/London), so prices and checkout show your local currency when we can’t tell your country another way. Nothing else is stored.Duration:6 months
Two-step reminderep_mfa_laterOnly if you choose “Remind me later” on the two-step verification reminder: hides it for a week.Duration:7 days
Product analytics (optional)ph_<key>_posthogph_<key>_posthog_cpmOnly if you accept analytics: a random id PostHog uses to count which features are used. Removed if you reject analytics.Duration:1 year

4.Browser storage#

Your privacy choiceep_consentRemembers whether you accepted or rejected analytics, and which version of this notice you saw. Strictly necessary to respect your choice.Duration:Until you change it or clear your browser
Previous page (session storage)ep_prevep_curLets “Back” links return you to the page you came from. Kept only for the current tab.Duration:Until you close the tab
Visitor id and visit marker (optional)ep_videp_visitOnly if you accept analytics: a random id (not linked to your name, no IP address stored) so we can count visits and how many people are online. Removed if you reject analytics.Duration:Until you reject analytics or clear your browser; visit records are deleted after 13 months
Product analytics (optional)ph_<key>_posthogph_*Only if you accept analytics: the same PostHog id and settings, kept in local storage too. Removed if you reject analytics.Duration:Until you reject analytics or clear your browser
Saved legal advisor applicationep:lawyer-application:v1Saves your progress on the legal advisor application form on your own device, so you don’t lose it. It isn’t sent to us until you submit, and is cleared when you do.Duration:Until you submit or clear it

5.Analytics: optional and off by default#

We don’t use advertising or social media cookies. Analytics run only after you choose “Accept analytics”: our own visit counts (the visitor id above) and PostHog, hosted in the EU, which counts which features are used. PostHog never receives your name, email, documents, answers or the countries you look at. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a “no”. You can change your mind any time from “Privacy choices” in the footer or the app menu; we keep a record of each choice as proof of consent.

6.Third-party sites#

If you sign in with Google or follow a link to another website, such as a government site, that site may set its own cookies under its own policy. We don’t control those cookies.

7.Managing cookies#

You can delete or block cookies and browser storage in your browser settings. Blocking the strictly necessary cookies will stop you from signing in, but you can still browse the public website. Analytics can be switched off from “Privacy choices” without affecting anything else.

8.Contact#

Questions about cookies? Email [email protected].