This Cookie Notice explains how TaxFigure LLC (“TaxFigure,” “we,” or “our”) uses cookies and similar technologies. It supplements our Privacy Notice, which describes how we handle personal data more generally.
1. What Cookies Are
A cookie is a small text file a website stores in your browser. Related technologies — including browser local storage and session storage — work in a similar way, and this Notice covers those too. Where this Notice says “cookies,” it means all of them.
A first-party cookie is set by the site you are visiting. A third-party cookie is set by a different organisation whose code runs on the page.
2. Our Public Website Sets No Cookies
taxfigure.com does not set any cookies. It loads no third-party scripts, no advertising or analytics tags, and no social media widgets. You can browse our public website without any cookie being stored on your device.
Because of this, there is nothing to consent to and nothing to switch off when you use our public website. The cookies described in the rest of this Notice apply only to the TaxFigure Platform at app.taxfigure.com, which you reach by signing in.
3. Cookies on the TaxFigure Platform
All cookies on the Platform are first-party — they are set by app.taxfigure.com itself. We do not permit third parties to set their own cookies on the Platform, and we do not use cookies for advertising.
3.1 Strictly Necessary
These are required for the Platform to work. They cannot be switched off, because without them you cannot sign in or stay signed in.
- sb-access-token, sb-refresh-token — keep you signed in between page loads and let your session be renewed without signing in again.
- trusted_device — records that you have completed multi-factor authentication on this device, so you are not asked for a code on every visit. This is a security feature.
3.2 Analytics and Session Replay
We use PostHog to understand how the Platform is used and to diagnose errors. PostHog is served through our own domain, so its cookie is first-party.
- ph_<id>_posthog — assigns your browser an identifier so repeat visits can be recognised, and records which features are used and where errors occur.
Session replay. PostHog also reconstructs a visual replay of Platform sessions so we can diagnose usability problems and errors. Replays are text-masked: page content, values you type, names, figures and document titles are replaced with placeholder characters before the replay leaves your browser. What is retained is the structure of the page and how you moved through it — not what it said. Replays are deleted automatically after 30 days.
3.3 Browser Storage
The Platform also keeps a small amount of information in your browser’s local storage. This stays on your device and is not a tracking mechanism: your display preference (theme-mode), your progress through the product tour (onboarding_tour_state), and working copies of data already loaded into the page so it does not have to be fetched again.
4. What We Do Not Do
To be explicit, because these are the uses people are most often concerned about:
- We do not use cookies for advertising or ad targeting.
- We do not sell or share cookie data with advertising networks or data brokers.
- We do not use third-party advertising or social media tracking pixels.
- We do not track you across other companies’ websites, and we do not build cross-site advertising profiles.
5. How to Control Cookies
Because we set no cookies on our public website and no advertising cookies anywhere, the controls below apply to the analytics cookie on the Platform.
5.1 Through Your Browser
Every major browser lets you block or delete cookies and clear local storage, either for all sites or for a specific one. Look for “Cookies and site data” in your browser settings, or use its private browsing mode. Blocking cookies for app.taxfigure.com will stop analytics collection — but it will also sign you out and prevent you from signing back in, because the authentication cookies in section 3.1 are required.
5.2 By Asking Us
You can ask us to exclude your account from product analytics and session replay by writing to privacy@taxfigure.com. We will confirm when it has been applied.
5.3 Do Not Track
Some browsers send a “Do Not Track” signal. There is no common industry standard for how to interpret it, and we do not currently respond to it. The controls in sections 5.1 and 5.2 are effective regardless.
6. Changes to This Notice
We will update this Notice when the technologies we use change, and revise the effective date above. Material changes will be communicated through the Platform or by email.
7. Contact
Questions about this Notice can be sent to privacy@taxfigure.com. Our postal address and other contact details are in section 9 of the Privacy Notice.