Cookies & Storage
This notice explains the cookies and device storage used by the Expense Pools website and iOS app. It should be read with our Privacy Notice.
1. Essential web cookies
Expense Pools uses a Secure, HTTP-only, same-site cookie to maintain an authenticated web session. A standard session lasts up to 24 hours. If you choose “Remember me,” it may last up to 30 days, subject to revocation, inactivity, or security controls. These cookies are necessary to sign you in and protect your account; they are not advertising cookies.
2. Browser storage
The web app uses local storage for interface preferences such as language, the most recently selected pool, and other settings that improve continuity between visits. Session storage may preserve the page you intended to visit after signing in. These values do not replace server-side authorization checks.
3. Offline and cached files
A service worker may cache public application files such as HTML, styles, scripts, icons, and translations so the interface loads more reliably. Authenticated API responses are network-only and are not intentionally placed in the application cache. Your browser may still apply its own normal network cache controls.
4. Bot and abuse protection
Cloudflare Turnstile is used on selected account and invitation actions. It may use cookies or similar device, browser, network, and interaction signals to determine whether a request is likely to come from a person rather than automated abuse. Turnstile is used for security, not behavioural advertising.
5. iOS device storage
The iOS app stores authentication credentials in Apple’s Keychain and may store interface preferences on the device. If you enable Face ID or Touch ID unlock, the biometric comparison is performed by the operating system. Expense Pools does not receive or store your face or fingerprint data.
6. Optional website analytics
Expense Pools uses Google Analytics 4 with measurement ID G-JF1RKLWNDN only after you select “Accept analytics.” Before that choice, the Google Analytics tag is not downloaded and analytics storage remains denied. When enabled, Google Analytics may use first-party identifiers such as _ga and _ga_* and process page paths, browser and device details, approximate location, session information, and general interactions to help us understand aggregate website use.
We configure analytics without Google Signals or ad-personalization signals and keep advertising storage, advertising user data, and advertising personalization denied. We do not use Google Analytics for behavioural advertising. Page locations sent by our integration exclude query strings, verification and recovery credentials, arbitrary URL fragments, and application content such as names, pool names, or transaction descriptions.
7. Your controls
You may accept or decline optional analytics without losing access to Expense Pools. Your choice is saved in local storage on that browser. Select “Review analytics choices” below to change it. Withdrawing consent stops future analytics collection from this browser and attempts to remove Google Analytics first-party cookies accessible to Expense Pools. You can also remove cookies, cached files, and local storage through your browser or device settings. Removing authentication cookies or Keychain credentials signs you out or disables biometric unlock. Blocking all storage may prevent parts of the service from working correctly.
8. Contact
Expense Pools is operated by Sylvadi Design Inc., 148 Byng Ave, North York, Ontario M2N 4K7, Canada. Questions about cookies, device storage, or privacy may be sent to contact@sylvadi.com. Product support is available at help@sylvadi.com.