Cookie Policy

Cookies are small files stored on your device. We use cookies that are strictly necessary to run the Service, and — only if you allow it — analytics cookies from Microsoft Clarity and Google Analytics. We set no advertising cookies.

Nothing optional runs until you choose in the cookie banner, and you can change your choice at any time from Cookie settings at the bottom of every public page, or from Settings → Privacy in the app. Shared invoice links and client onboarding links never use analytics cookies.

These are required for the Service to function and do not need consent.

We use Vercel Web Analytics to count page views and understand roughly how the product is used. It sets no cookies and stores nothing on your device. Visitors are identified by a hash derived from the request, which is discarded after 24 hours; no IP address is stored and no profile is built across sites or sessions.

Because this involves no storage on your device and no personal identifiers, it does not require your consent under the ePrivacy rules that govern cookies.

If you choose Accept all, or turn on Analytics under Manage preferences, we load Microsoft Clarity on our website and in the signed-in app. Clarity records clicks, scrolling and mouse movement as session replays and heatmaps, so we can see what is confusing and improve it. Form fields are masked everywhere, and inside the app all text is masked as well — replays show the layout and where you clicked, never your clients, invoices, amounts or bank details. Masking happens in your browser, before anything is sent.

The same choice also loads Google Analytics, which counts visits, pages viewed and roughly where visitors come from. Advertising features — ad storage, ad personalisation and sharing data for ads — are switched off.

Clarity is provided by Microsoft and Google Analytics by Google; both may process this data in the United States (under the EU–US Data Privacy Framework). Neither runs on shared invoice links or client onboarding links, which are used by your clients rather than by you. If you decline, neither is loaded; if you withdraw consent later, both are told to stop and the Google Analytics cookies are deleted.

Use Cookie settings at the bottom of any page to see or change your choice; withdrawing consent is as easy as giving it. If your browser sends a Global Privacy Control signal, we treat it as declining analytics. You can also clear or block cookies in your browser settings, though blocking the session cookie will sign you out.

We may update this policy as our use of cookies changes. Questions: privacy@invoister.app.