Cookie Policy
Last updated 7 October 2026
The short version
Today ExpenseCatcher uses only essential cookies — to keep you signed in and to remember your cookie choice. Analytics or marketing cookies would only ever load after you say yes, and you can change your mind at any time.
1. What cookies are
Cookies are small files a website stores in your browser. Similar technologies — local storage, pixels, SDKs — are covered by this policy too, and we call them all “cookies”. This policy explains the cookies ExpenseCatcher (AffZero LLC) uses on expensecatcher.com and in the app.
2. Essential cookies
These make the site work and don’t need consent under EU and UK law. You can block them in your browser, but then you won’t be able to sign in.
sb-…-auth-token- Set byExpenseCatcher (Supabase Auth)
- PurposeKeeps you signed in. May be split into numbered parts.
- ExpiresWhen you sign out, or up to 400 days
sb-…-auth-token-code-verifier- Set byExpenseCatcher (Supabase Auth)
- PurposeSecures the Google sign-in round trip.
- ExpiresWhen sign-in completes
ec_auth_flow- Set byExpenseCatcher
- PurposeRemembers where to return you after Google sign-in, and which page or campaign you signed up from.
- Expires10 minutes
ec_consent- Set byExpenseCatcher
- PurposeRemembers your cookie choices.
- Expires6 months
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
sb-…-auth-token | ExpenseCatcher (Supabase Auth) | Keeps you signed in. May be split into numbered parts. | When you sign out, or up to 400 days |
sb-…-auth-token-code-verifier | ExpenseCatcher (Supabase Auth) | Secures the Google sign-in round trip. | When sign-in completes |
ec_auth_flow | ExpenseCatcher | Remembers where to return you after Google sign-in, and which page or campaign you signed up from. | 10 minutes |
ec_consent | ExpenseCatcher | Remembers your cookie choices. | 6 months |
3. Analytics and marketing cookies
We do not use any today. If we add them — for example to count visits, or to learn which Google or Meta ads bring people to the site — they will load only after you choose “Accept all” or switch the category on, and we will list each one here first. Marketing cookies may count as “sharing” under California law; refusing them, or sending a Global Privacy Control signal, opts you out.
4. Google’s file picker
When you choose a Drive folder or sheet inside the app, Google’s file picker opens. It runs on Google’s domain and may use Google’s own cookies under the Google Privacy Policy. It only appears when you open it.
5. Your choices
- to change what you allowed. The same link is in the footer of every page.
- Turn on Global Privacy Control in your browser and we keep optional cookies off.
- Use your browser’s settings to block or delete cookies.
More about how we handle personal data is in the Privacy Policy. Questions: hello@expensecatcher.com.