Cookie Policy

Cookies we use

These cookies are required for PaperTax to work. They keep your session active and protect against security threats.

What	Purpose	Kept for
sb-<project>-auth-token (cookie, sometimes split in two)	Keeps you logged in. Holds your session and its renewal token	Renewed automatically; cleared when you log out
sb-<project>-auth-token-code-verifier (cookie)	Used only during a Google sign-in, to finish it safely	A few minutes
pt-otp-email (cookie)	Remembers the address you asked us to email a sign-in link to, so the page that takes the code does not ask you to type it again	One hour, or until you sign in
pt:onb:… (browser storage)	Remembers you have already seen the first-run tips	Until you clear your browser data
Layout preferences (browser storage)	Remembers your chat panel width and which sections you collapsed	Until you clear your browser data
pt-consent (cookie)	Remembers whether you accepted or refused analytics, so we do not ask again	12 months
ph_* (cookie and browser storage, only if you accept)	PostHog analytics: recognises your browser between visits so a visit is counted once	12 months

If you accept analytics, PostHog can record the screens you visit and your interactions so we can understand how the app is used. Document previews are blocked from replay, and marked personal content and form inputs are masked. The privacy policy explains the processing and retention details.

When you pay, Stripe sets its own cookies during and immediately after checkout for fraud prevention, governed by Stripe's Privacy Policy. We also count page views with Vercel Web Analytics and with PostHog, both without any cookie at all — the privacy policy sets out exactly what that records. We use no advertising cookies of any kind, and we do not follow you to other websites.

Your choices and contact

Analytics cookies are set only if you accept them. Before you decide, and if you decline, no analytics cookies are set. Essential cookies still keep you signed in and remember your consent choice. You can use the site and your return either way.

If you decline, there are no analytics cookies or screen recordings. Visits are still counted without cookies: PostHog uses a temporary identifier that is discarded the same day and records, without identifying you, which pages were opened, for how long, and which links and buttons were used; Vercel counts page views without cookies. For account holders, the service also records the product events described in the privacy policy, such as starting a return or making a payment. Those server events do not set browser cookies or record screens.

When you sign in, we ask once more on a full screen, because that is where the reasons make sense. Your return works whichever way you answer, and we only ask that once. You can change your mind at any time, in either direction, using the switch below.

You can block or clear the cookies in your browser at any time, but disabling the essential ones will prevent you from logging in. Questions about cookies: email contact@papertax.ch.

This policy complies with the Swiss nFADP, FMG Art. 45c, and the FDPIC Cookie Guidelines (October 2025).