Cookie policy

Until you agree, App Spender sets no cookies on you at all. If you decline, it never does. There is no wall, no reduced version of the product, and nothing to keep clicking past. The answer is remembered and you are not asked again.

What you are being asked about

Three services measure how the public site is used: PostHog, which counts page views and completed scans; Google Analytics; and the Meta pixel. We use them to see which pages bring people here and whether advertising this is worth doing.

Google and Meta are advertising companies. Saying yes means they set cookies, may recognise you on other sites, and in Meta's case may match your visit to a Meta account. We would rather say that plainly than bury it: it is the reason this is a question rather than a default.

What they never receive

Nothing from your bank statement reaches any of them. Not the merchant names, not which apps we found, not what you spend, not your savings figure, not a label you typed. They see which page you were on. That boundary is enforced by a test in our codebase that fails the build if statement content ever appears in something addressed to them.

They are also absent from the staff dashboard entirely, which is the one screen in this product that holds anyone's name.

One thing that is not a choice

When something in App Spender breaks, your browser sends an error report to Musket Goose, the company that builds it and keeps it running. It is not measurement and it is not advertising: it is what tells us a fault exists, instead of the fault being met again by the next person. It sets no cookie, it cannot recognise you on this site or anywhere else, and no part of your statement, your email or anything you typed is in it. That is why it is not in the banner: there is nothing here to trade away.

If you say no

No script is loaded, no connection is opened and no cookie is written. Declining is not an opt-out flag sent to three companies. It is those three never being asked to run. The scan, the review, your report and your cancellation steps are identical either way, because none of this is involved in reading a statement.

Changing your mind

Use the control at the bottom of this page. Turning measurement off also deletes the cookies those three had already set, and reloads the page so that anything already running stops.

The one cookie that is not optional

The staff dashboard, at a private address, uses a session cookie to keep whoever is signed in signed in. It is set only after someone enters a password, it is strictly necessary for that page to work, and it is never set on any page open to the public. You will never meet it.

Your scan results and the state of your review are held in the page itself, in memory, for as long as the tab is open. They are not written anywhere your browser would keep them.

Closing the tab ends the session and the results go with it. Deleting your data in the chat clears them immediately.