Cookie Policy
Last updated: August 9, 2026
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site. We also use similar technologies such as local storage for session state.
Cookies We Use
| Type | Purpose | Examples | Retention |
|---|---|---|---|
| Strictly Necessary | Required for the site to function. Includes session management, authentication tokens, and security cookies. Cannot be disabled. | Session cookie, CSRF token, Supabase auth token | Session or up to 7 days |
| Functional | Remember your preferences and settings to improve your experience on return visits. | Theme preference, language setting, your cookie choices (__Host-cp_consent), a record that we have shown you our cookie notice (__Host-cp_implied), your coarse region (__Host-cp_region) | Region 12 hours. A choice that allows everything is kept up to 12 months; a choice that refuses anything is kept up to 5 years, so an opt-out is not quietly forgotten. The record that we showed you our notice is kept up to 12 months. Some browsers cap cookie lifetimes below these figures, in which case you will be asked again sooner. |
| Analytics | Help us understand how visitors use the site so we can improve performance and content. Used only on our public marketing pages. In the UK, EU, Switzerland and Brazil these are set only after you agree; elsewhere they are set on arrival and you can switch them off at any time. | Google Analytics 4 (_ga, _gid) | Up to 2 years |
| Advertising | Measure which campaigns bring visitors to our site and show relevant ads on other platforms. These involve sharing browsing activity with the advertising platforms named below. Used only on our public marketing pages. In the UK, EU, Switzerland and Brazil these are set only after you agree; elsewhere they are set on arrival and you can switch them off at any time. | LinkedIn Insight Tag, Meta Pixel, Google Ads, Google Tag Manager | Up to 2 years |
Third-Party Cookies
Our site uses Supabase for authentication (which sets session cookies) and Stripe for payment processing (which may set cookies on payment pages). Neither is used for advertising.
On our public marketing pages only (home, pricing, features, contact, book-a-demo and similar), we also use third-party analytics and advertising technologies. Whether they run before or after you choose depends on where you are: if you are in the UK, EU, Switzerland or Brazil, nothing below loads until you agree. Everywhere else they load when you arrive and you can turn them off at any time using the link in our footer.
- Google Analytics 4 — aggregate measurement of how the marketing site is used.
- LinkedIn Insight Tag — measures which LinkedIn campaigns bring visitors here, and allows LinkedIn to show you our ads.
- Meta Pixel — the equivalent for Facebook and Instagram.
- Google Ads — conversion measurement and remarketing.
- Google Tag Manager — a container that can deliver technologies like those above. Where we use it, it loads only if you allow advertising, and not at all otherwise. If we ever use it to add a technology not named on this page, we will update this page and ask you to make your choices again.
The advertising technologies above involve sharing your browsing activity on our marketing pages with those platforms for cross-context behavioral advertising. Under California law this counts as “sharing” even though we receive no money for it, and you have the right to opt out — see our California Privacy Rights page.
None of these technologies run on the consumer portal, the client portal, or any signed-in part of ClaraPay. Activity relating to your account or your debt is never shared with an advertising platform.
We also use Vercel Speed Insights to measure page performance. It sets no cookies and no identifiers and does not track you across sites, so it runs as a strictly necessary technology.
Managing Cookies
You can change your analytics and advertising choices at any time using the Cookie preferences link in the site footer. Withdrawing permission is as easy as granting it, and takes effect immediately — the page reloads so that any script you have withdrawn permission from is no longer present.
If your browser sends a Global Privacy Control signal, we treat that as an opt-out of advertising and apply it automatically. You do not need to do anything else.
You can also control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the consumer portal. Most browsers allow you to:
- View cookies currently stored
- Delete individual or all cookies
- Block cookies from specific sites or all sites
- Set preferences for first-party vs third-party cookies
Changes to This Policy
We may update this Cookie Policy as our technology changes. Changes will be posted on this page with an updated date. If a change materially affects what we do with your data, we will ask you to make your choices again rather than treat continued use of the site as agreement.