Cookie Policy

A cookie is a small text file stored on your computer or device by your web browser. Cookies identify your browser, provide analytics, and remember information about you such as your language preference or login information. They are completely safe and cannot be used to run programs or deliver viruses to your device.

We use first-party cookies on our website to facilitate the operation and functionality of the service, maintain your authenticated session, improve your experience and make navigation quicker, and remember your preferences.

We use essential cookies to make our website work. These cookies are strictly necessary to enable core functionality such as authentication, session management, security (including CSRF protection), and accessibility. Without them you would not be able to log in or use the service. You may disable these by changing your browser settings, but this will prevent the service from functioning properly.

We use local storage to persist your preferences, application state (such as navigation and UI settings), and Zustand store data on the client side. Local storage provides similar functionality to cookies but with greater capacity and no information transmitted in HTTP request headers. Preference data stays on your device unless needed by the service. Analytics also uses local storage for a browser identifier and attribution. On signup or login, a browser possession proof is sent to our authenticated endpoint to connect that identifier to your account; the proof is not stored server-side or sent to PostHog.

We use session-based authentication (via Better Auth) to identify you while you are logged in. Your session cookie is set with secure, HTTP-only, and SameSite attributes to protect against cross-site attacks. Sessions allow us to maintain your authenticated state as you navigate through the application without requiring you to log in on every page.

We may collect product analytics and event telemetry such as pages visited, feature usage, signup funnel progress, checkout progress, and session-level interaction patterns to understand how users interact with the service and identify areas for improvement. This may include deezbills-controlled analytics endpoints and configured analytics providers. We use Google Analytics and Google Ads cookies on public pages and account-creation screens to understand how people find our website and complete signup. We share completed-signup events and campaign attribution with Google Ads to measure which ads lead to signups. We do not send names, email addresses, phone numbers, account identifiers, financial records or Fred conversations to Google for this measurement, and we do not enable enhanced conversions or advertising personalization. Google Analytics and Google Ads are not used on pages containing your private financial information. We use PostHog to measure public-page performance and progress through signup and subscription. When enabled, session replay records only signed-out marketing pages, with forms and inputs blocked; signup and private financial screens are excluded. Replay does not capture console logs or network payloads and has a 30-day retention period. We connect browser activity to an account using a pseudonymous identifier, without sending names, emails or financial content to PostHog. Browser Do Not Track and Global Privacy Control signals disable browser analytics and replay. We do not use social media tracking pixels or use your financial information to personalize advertising.

Most browsers allow you to view, manage, and delete cookies through their settings. However, if you block essential cookies, you will not be able to log in or use the service. If you block analytics cookies, it will not affect your ability to use the service. Disabling a cookie or category of cookie does not delete the cookie from your browser — you will need to do this yourself through your browser settings.

We may update this Cookie Policy from time to time so that it accurately reflects our service and practices. We will notify you of changes before they take effect. If you continue to use the service, you will be bound by the updated Cookie Policy.