Billable8 · Legal
Cookie choices
Effective September 7, 2026
Billable8 uses the minimum browser storage needed to keep the service secure and remember your choices. Optional analytics on the public site loads nothing at all until you allow it — no script, no request to Google, not even one that stores nothing. Google Analytics does not measure private application pages.
Essential storage
Scroll sideways to see all columns.
| Item | Purpose | Duration |
|---|---|---|
| Auth.js session cookie | Keeps a signed-in person securely signed in | Up to 7 days; rotated during use |
| __Host-authjs.csrf-token | Protects sign-in and account actions from forged requests | Session |
| __Secure-authjs.callback-url | Returns a visitor to the requested Billable8 page after sign-in | Session |
| Theme preference | Remembers light or dark mode in local storage | Until you clear site data |
These are necessary for the requested service or are stored only on your device. They do not carry advertising identifiers.
Optional analytics
Google Analytics runs on public pages such as the homepage and pricing page, and only once you press Allow. It helps us understand which pages are useful and how visitors arrived. With consent, we also connect campaigns to successful signups, trial starts, checkout starts, subscription payments and refunds through our server. Private page views and workspace content are never collected. Advertising signals and ad personalisation are disabled for everyone, whichever way you answer.
Your answer decides whether anything runs at all:
Scroll sideways to see all columns.
| Your answer | What is sent | What is stored on your device |
|---|---|---|
| Not answered yet | Nothing — the script is not created and no request reaches Google | Nothing |
| No thanks, or Escape | No new browser analytics. If you previously allowed analytics, future server events stop when your withdrawal reaches our server. | Your answer and, while an offline withdrawal is pending, a revocation token |
| Allow | Public pages, campaign labels, referrer domain, an anonymous browser identifier, and signup and subscription conversion events. Payment events contain the plan, amount, currency and an opaque transaction ID. | Google Analytics cookies, up to 2 years, and campaign attribution in local storage for up to 90 days |
Your choice is stored as billable.analytics-consent in local storage, together with its policy version. The choice applies to this browser only. After a consented signup, an HTTP-only cookie named billable.analytics-workspace lasts up to 90 days so a withdrawal can remove that signup's server attribution record. An offline withdrawal is retried when you next open a public page. Clearing browser storage alone does not notify our server; use Cookie settings to withdraw first.
After a consented signup, we retain the campaign record and anonymous identifier for up to 90 days to connect a later subscription payment to its campaign. Google event and user data are retained for up to 14 months; Google may retain aggregate reports longer. No names, email addresses, customer invoices, projects, hours or rates are included in these events.
Change your choice
Use in the footer of any public page to change or withdraw your choice. You can also block or delete cookies using your browser controls; blocking essential cookies will prevent sign-in from working.
More detail
The privacy policy explains the data involved, how private workspace content is excluded, and how to exercise your privacy rights.