Cookies

Essential

This cookie keeps this browser in your workspace. The workspace still works if you reject analytics.

sl365_workspace

Keeps this browser in your workspace after you create it or open it with an access token. The cookie value is the access token. It is marked HttpOnly, so the analytics script cannot read it. On shiftledger.io it is sent only over HTTPS. It lasts for the browser session. Sign out deletes it. ShiftLedger does not set a longer expiry.

Choice and return visit

These are not required to open or use a workspace.

sl365_funnel

Remembers, for about three minutes, that this browser just opened an existing workspace. The only value is return_use. It does not contain the access token, a PDF, or an amount. A return-visit analytics event is sent only if you have accepted analytics. The workspace works if this cookie is missing.

sl365-analytics-consent-v1

Stored in this browser's local storage, not as a cookie. It remembers whether you accepted or rejected analytics so the question is not repeated on every page. It remains until you change the choice or clear site data for shiftledger.io.

Analytics

Analytics measurement is switched on for this service. It stays off until you choose Accept analytics. Reject analytics leaves it off. Use Cookie settings in the page footer to change the choice later. The choice is stored in this browser only.

If you accept, and only then, ShiftLedger can record how you found the site and whether a workspace, upload, admitted record, ready quarter, or return visit happened. Events do not include PDFs, access tokens, earnings, expenses, mileage, or workspace identifiers. Advertising storage is denied. ShiftLedger configures Google Analytics with IP anonymisation.

Campaign storage, after you accept

• sl365-acq-first-touch-v1 in local storage. The first campaign link ShiftLedger accepted: the five utm_ fields, the landing path, and the time. It is not replaced by a later campaign.
• sl365-acq-current-touch-v1 in local storage. The latest of those campaign links.
• sl365-acq-visit-v1 in session storage. Stops the visit event repeating during the same browser session.
• sl365-acq-quarter-ready-v1: followed by a quarter, in local storage. Stops the same ready-quarter event repeating on this browser.

Rejecting analytics deletes the first-touch and current-touch campaign values and stops further analytics collection. The workspace cookie stays. Google may already have set its own cookies, commonly named _ga and _ga_ followed by a measurement id. ShiftLedger does not create those itself. They appear only after you accept and your browser loads Google's script. Rejecting analytics stops further collection. Cookies Google has already stored remain until they expire or you clear them in the browser.

Google's privacy information is at policies.google.com/privacy.

How to choose

When analytics measurement is on, the first visit shows two choices with equal effect: Accept analytics and Reject analytics. Nothing is pre-selected. The page behind the notice remains usable.

You can reopen the choice from Cookie settings in the footer of the public pages and the workspace. The same choice is explained in Privacy.

Questions: support@shiftledger.io.