Cookie Policy

Last updated: 7 October 2026

This policy explains what Expensa stores on your device and how the website measures traffic when you visit getexpensa.com.

What are cookies and similar technologies?

"Cookies" are small text files a site can save in your browser. We also use similar technologies such as localStorage, which stores data on your device rather than sending it to a server. In this policy the word "cookies" covers both.

What we use today

This website uses essential storage and optional Google Analytics storage. It also counts basic site events without storing anything in your browser.

Strictly necessary (always on)

• theme — remembers whether you prefer light or dark mode. Stored in localStorage on your device.
• expensa_cookie_consent_v1 — remembers your choice on the consent banner so we don't ask again. Stored in localStorage on your device.

These remember your preferences and do not identify you. You can clear them in your browser settings.

Cookieless site statistics (always on)

Our Cloudflare Worker counts pageviews and clicks on links to the Expensa App Store listing. The browser sends the page path, the referring website's hostname or a campaign label, and the type of event. Cloudflare supplies a country code from the network request. We store only daily totals grouped by these fields in a Cloudflare D1 database in the EU, for about 400 days. We do not save IP addresses, user agents, full URLs, cookies, browser storage, or visitor identifiers in this counter. Cloudflare necessarily processes network requests to deliver the service; see our Privacy Policy. These counts cannot identify unique people or sessions.

Google Analytics (opt-in, off by default)

If you enable Analytics in the banner, we load Google Analytics 4 to collect usage statistics. Until you opt in, the Google tag is not loaded: if you opt out or do nothing, no analytics request is sent to Google. Your choice is passed to Google through Consent Mode v2. If you turn Analytics off later, the tag stops loading and the cookies below are deleted.

• _ga — distinguishes unique visitors. Set by Google. Expires after 2 years.
• _ga_7XLM35QGCQ — persists session state for our Google Analytics property. Set by Google. Expires after 2 years.

Data is processed by Google LLC (United States) as our processor under their Privacy Policy. IP addresses are truncated by Google before storage, Google Signals is disabled, and we do not use this data for advertising or combine it with other datasets.

Marketing (opt-in, off by default)

Currently unused. If we ever add marketing or advertising cookies, they will be listed here and will stay disabled unless you consent.

Your choices

The first time you visit, we show a small banner at the bottom of the page with three options:

• Accept all — allows every category listed above.
• Reject non-essential — only strictly necessary storage is used; the cookieless site counter still measures aggregate traffic.
• Customize — pick each category individually.

Your choice is stored on this device and applies until you clear your browser storage or change it. You can reopen the preferences at any time via the Cookie settings link in the footer.

Your rights

You can delete browser storage at any time from your browser settings. Rejecting non-essential categories will not reduce functionality on this site. The cookieless counter cannot delete an individual visit from daily totals because it has no visitor identifier.

Under the GDPR (EU/EEA, UK) and the CCPA/CPRA (California), you also have the right to access, correct, delete, and port any personal data we may hold about you, and to object to or restrict processing. For those requests, see our Privacy Policy.

Changes to this policy

If our use of cookies or storage changes, we will update this page and, where needed, ask for your choice again. The date at the top reflects the most recent change.

Contact

Questions about cookies or this policy? Reach out via the contact details in our Privacy Policy.