Cookies & analytics notice.

Browser storage

When browser storage is available, the page stores the privacy choice you make in local storage under verifyspend.privacy.v1. It remembers decline, analytics-only or analytics-plus-replays for this browser and origin. It is not an account identifier, and it stays until you change the preference, clear site storage or the implementation changes the key. If saving is blocked, the controls report that your choice applies only to the current page.

Umami documents that its tracking code does not use cookies. That statement is not a claim that hosting infrastructure can never use cookies; the website is hosted on Cloudflare Pages, and any infrastructure-cookie behavior remains to be verified. No advertising-cookie integration is implemented.

Analytics is optional

The Umami tracker is loaded only after permission, on the launched and explicitly configured public home. You can decline and still read the website, use its navigation and contact VerifySpend. The implemented pageview payload uses a fixed public path and title and excludes query strings, fragments, referrers, custom visitor identifiers and custom event data.

The measurement service also receives network requests and derives browser, device and approximate location information. The Umami service and its database and cache are deployed on Railway in Amsterdam, Netherlands. Provider logging, access and deletion arrangements remain to be confirmed.

Optional session recordings

The “Allow all” choice permits sampled Umami recordings when the recorder configuration passes the page's privacy checks. Previously saved analytics-only permission does not load the recorder. Strict masking covers all text and input values; fields, editable content, contact links and marked private areas are excluded.

Heatmaps are disabled, recordings last at most five minutes, and the configured sample fraction cannot exceed 15%. These are implementation limits, not a promise about how many visitors are recorded. Unsafe or unavailable recorder settings prevent it from loading.

Change or withdraw permission

Use Privacy choices to manage the preference. Decline stops future analytics and recorder sends, including queued transmissions. Data already received requires a separate privacy request. Do Not Track and Global Privacy Control override a saved permission. Clearing browser storage clears the saved choice; optional measurement again requires permission.

Local previews, review builds and private routes are not measured. This local review environment may separately store page-comparison selections; that tooling and its storage key are excluded from the public production build.

The approved category-specific retention targets are set out in the privacy policy. Cleanup controls are not yet implemented or verified; provider recovery-copy handling and hosting-cookie behavior remain to be confirmed. No Cloudflare Logpush export is configured for the website; this does not establish that infrastructure logs are absent. See the privacy policy for the current information flows and contact channel.