CrestwellCookie Policy
← All legal documentsCrestwell sets only what it needs to work. There is no analytics, no advertising, no cross-site tracking, and no third-party marketing tag anywhere on this site or in the application.
That is why you have not been shown a cookie banner. Under the Privacy and Electronic Communications Regulations, consent is required for storage that is not strictly necessary for a service you asked for. Everything below is either strictly necessary or a preference you set yourself by using the product, so asking for consent would be asking permission we do not need — and offering a "reject" button for the cookie that keeps you logged in would not be a real choice.
If that ever changes — if we add product analytics, for example — this page changes first, and a consent banner appears before any such storage is set.
Cookies
| Cookie | Set by | Purpose | Type |
|---|---|---|---|
sb-<project>-auth-token (and its chunked parts) |
Supabase, our authentication provider | Keeps you signed in and identifies your session on each request. Without it you cannot log in. | Strictly necessary |
| Session cookies set during payment | Stripe, on Stripe's own checkout pages | Fraud prevention and completing a payment you initiated. Governed by Stripe's own cookie policy. | Strictly necessary |
We do not set any cookie of our own for analytics, profiling or advertising.
Local storage on your device
The application stores a small amount of data in your browser rather than on our servers. It never leaves your device, is not readable by us, and is not used to track you across sites. Clearing your browser data removes all of it.
| What | Why |
|---|---|
| Appearance preferences — theme, colour and font choices | So the product looks the way you left it |
| Sidebar collapsed / expanded, list view choices | Interface state between visits |
| A cached copy of your firm's name, logo and document template settings | So your branding renders immediately instead of flashing the default first |
| A note of which fact-find form your firm uses | So a saved document opens straight onto the right layout |
| Fact-find data held while you move between the review and edit screens (session only) | So work in progress is not lost mid-flow. Cleared when the tab closes. |
What we do not do
- No analytics or product telemetry. We do not use Google Analytics, Meta Pixel, Hotjar, Segment, PostHog, or any equivalent.
- No advertising or remarketing tags, and no data shared with ad networks.
- No cross-site tracking, and no third-party cookies for profiling.
- No fingerprinting.
Controlling cookies
Because everything we set is strictly necessary or a preference you chose, there is nothing to switch off in the product. You can still block or delete cookies in your browser settings — blocking the authentication cookie will prevent you signing in.
Clearing your browser's local storage resets the preferences above; nothing is lost from your account, since your firm's data lives on our servers.
Changes
If we introduce any non-essential storage, we will update this page and ask for your consent before setting it.