Privacy and cookies
This page says what MileageSheet stores in your browser and what it can send to other services while you use it. It covers the cookies the app needs, two services that help with addresses and payment, and product analytics, which is optional and only runs if you say yes.
Cookies the app needs
Section titled “Cookies the app needs”These make the app work. They are not used for tracking, so you are not asked about them.
| Cookie | What it does | When it goes |
|---|---|---|
session_id | Keeps you signed in. It is signed, so it cannot be changed, and it is hidden from scripts on the page | When you sign out |
| The app’s session cookie | Protects forms from being submitted by another site, and carries one-time messages such as “Saved” | When you close the browser |
Other services your browser talks to
Section titled “Other services your browser talks to”- Google Maps. Address search and the journey map use Google Maps. Google may set its own cookies when those parts of a page load. Google’s own policy governs them.
- Stripe. When an Administrator pays for a plan or an earlier company year, they go to Stripe’s own checkout page. Stripe’s policy covers what happens there.
Product analytics and session replay
Section titled “Product analytics and session replay”MileageSheet can use PostHog, a product analytics service, to learn where people get stuck so the app can be improved. When product analytics is switched on, nothing is sent and no analytics cookie is set until you choose Accept on the banner. If product analytics is switched off, none of this happens and you see no banner.
If you accept
Section titled “If you accept”- Where pages go. PostHog records which pages you open and in what order.
- Session replay. PostHog records a replay of how you used a page: clicks, scrolling and where the pointer moved. It is a rebuilt picture of the page, not a video of your screen, and it only covers MileageSheet.
- What is hidden. Your browser hides text and anything you type before it is sent, so the replay shows the shape of the page with blanked text. Receipt images are blocked. A small set of labels and choices that are not personal, such as menu names and button labels, are shown so a replay can be followed.
- What is not sent. Names, email addresses, addresses, amounts, notes and receipts are not sent as analytics data.
- Counts of key steps. For people who accepted, the app also records that a step happened: creating an account, verifying an email, signing in, adding a claim, submitting or approving a sheet, downloading an export, starting, closing or finishing a tour, or starting, finishing or going back from a payment. These carry only a number that identifies you inside MileageSheet, your company’s number, the Ireland or UK site, and the plan.
- Where it is kept. PostHog’s cloud in the EU, in Frankfurt, under a data processing agreement. Your IP address is discarded.
- How long. Recordings are kept only as long as the retention period set for our PostHog project allows.
If you decline
Section titled “If you decline”Nothing is loaded and no analytics cookie is set. MileageSheet works exactly the same.
Changing your mind
Section titled “Changing your mind”Use Cookie settings in the footer to accept or decline at any time. If you withdraw, MileageSheet stops sending analytics and removes the analytics cookie. The choice is remembered in a small cookie, and for a signed-in person it is also saved with their account so that steps taken in the background, such as a payment confirmation, follow it.
If analytics is switched off later
Section titled “If analytics is switched off later”Nothing more is sent and the banner no longer appears. Your browser may still hold a PostHog cookie from earlier. It is no longer used, and you can delete it in your browser settings.
Questions about your claims data
Section titled “Questions about your claims data”Your company decides who can see claims and what is kept. Start with your company’s Administrator. See Roles and permissions.