Cookies and Browser Storage

Cookies can accompany requests to a website. Local storage keeps values in your browser until removed; session storage normally lasts for a tab’s session. BookkeeperHR uses these mechanisms for sign-in, preferences and recovery of work you have not saved. Opening the homepage or legal pages does not load your profile or workspace. Existing sign-in cookies may still accompany requests to BookkeeperHR; account and app pages perform sign-in checks.

You can inspect, block or remove site data in your browser settings. Blocking sign-in storage can prevent account access. Clearing local storage can remove unsaved timesheet drafts and preferences. On shared devices, save your work, sign out and clear site data when appropriate. Dismissing the information banner only remembers that you have read it; it does not enable optional services. Use the controls below to allow or reject analytics independently of Calendly. An old notice acknowledgement never grants analytics consent.

No Calendly iframe is loaded until you select “Load Calendly”. Loading it connects your browser to Calendly, which receives technical information such as your IP address and browser details and may use cookies or similar storage. Calendly’s own cookie controls remain available; choosing to load the calendar does not accept every optional cookie it offers. You can choose “Keep calendar blocked” or email support instead. “Hide calendar” removes the embedded content and stops this page from loading it again until you choose to do so. It does not erase data already received or storage set by Calendly; use the provider’s controls or browser settings for that. We do not save the calendar choice across page reloads.

With your consent, BookkeeperHR uses PostHog to measure completed enquiries and calendar bookings, new-account setup, workspace creation, uploads, invitation acceptance, and timesheet/leave submissions and approvals. We send only the action name, time, environment, schema version, an opaque event identifier and a pseudonymous identifier (your internal account ID when signed in, otherwise a random ID held in page memory). We do not send names, email addresses, document contents or filenames, hours, leave details, page URLs, query strings, sign-in tokens or referrers. There is no automatic page/click tracking, session replay, advertising, location enrichment or person-profile creation. Anonymous visits are not linked across page reloads or merged with accounts. PostHog necessarily receives network connection information; our project is configured to discard client IP data and each event disables location enrichment. Events use the EU ingestion endpoint; European hosting does not exclude international provider operations. The selected free plan currently provides one year of event retention; this is not a guarantee of deletion on an exact day. We act as controller for this optional service-improvement processing, based on your consent. You can refuse or withdraw in the Cookies page without affecting app access. Withdrawal stops future collection and cancels pending sends where possible; it cannot recall data already received. Contact support to exercise your rights. We review retention and this notice before changing the plan or collection.

With the same optional analytics permission, and only when configured, your browser sends fixed operation categories, duration, outcome, HTTP status and a random per-request correlation ID to BookkeeperHR’s own diagnostic endpoint. These help us find slow navigation, session loading and API requests. Browser errors are reported as a fixed category; messages, stacks, page addresses, form contents and account identifiers are excluded. No additional tracking cookie or persistent identifier is created. These diagnostics go to our hosting logs, not PostHog. Essential server-side request, email-attempt and cleanup-job measurements may also be recorded to operate and protect the service, independently of optional browser consent. Email success means provider acceptance, not inbox delivery. Our application records exclude HR contents, credentials, raw IP addresses and user agents; the hosting service necessarily receives network information and may separately retain request metadata. Access, retention and processing locations follow the hosting account configuration and applicable agreements; no fixed retention or EU-only guarantee is made here. Optional browser collection stops when you reject analytics; records already received follow the applicable retention and rights process.

Storage necessary for sign-in, security or a feature you request is used for that functionality. The separate legal bases for processing personal data are explained in the Privacy Policy. Optional third-party booking content requires a separate choice; acknowledging the information banner is not that choice. Optional product analytics uses your consent and is never required for access.