How Paylists uses cookies and similar local-storage technologies on the Paylists websites and software.
This Cookie and Local-Storage Notice explains how Paylists LTD uses cookies and similar local-storage technologies on the Paylists websites and software. It supplements the Paylists Privacy Policy.
The Paylists software uses strictly necessary local-storage technologies required to operate the Services, primarily authentication tokens that keep you logged in. These technologies are essential and cannot be switched off without breaking the functionality of the Services.
Paylists also uses Google Analytics to understand how visitors use our website. Google Analytics sets cookies and is not strictly necessary, so it is used only with your consent. When you first visit the website, a cookie banner lets you accept or decline analytics cookies. Google Analytics is not loaded and no analytics cookies are set unless and until you accept.
You can change your choice at any time. To reopen the cookie banner and accept or withdraw your consent, use the Manage cookie preferences button in section 5 below. Strictly necessary cookies cannot be switched off, as the Services will not function without them.
"Cookies" are small text files that a website may place on your device when you visit the site. Similar technologies include localStorage, sessionStorage and IndexedDB, which are used by web applications to store information in your browser. In this notice, "local-storage technologies" refers collectively to all such technologies, including cookies.
Under the Privacy and Electronic Communications Regulations 2003 (UK) and Directive 2002/58/EC (EU), placing or accessing information on a user's device generally requires consent, unless the storage or access is strictly necessary to provide a service explicitly requested by the user.
The Paylists software uses the following strictly necessary local-storage technologies. These are needed to operate the Services and are exempt from the consent requirement under applicable law.
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
| Authentication session token | Supabase Auth | Keeps you logged in to the Paylists software after sign-in. | Session; refresh token typically up to 7 days. Cleared on sign-out. |
| Refresh token | Supabase Auth | Renews authentication sessions without requiring re-login on every request. | Typically up to 7 days. Cleared on sign-out. |
| CSRF / security token | Paylists / Vercel | Protects against cross-site request forgery and certain other security risks. | Session. |
| Application state | Paylists | Stores minimal UI state required for the interface to function during a session (e.g. UI preferences, in-progress form data). | Session, until cleared by user or sign-out. |
To understand how visitors use our website (for example, which pages are viewed and how visitors navigate the site), Paylists uses Google Analytics 4, a service provided by Google Ireland Limited. Google Analytics sets cookies on your device and is not strictly necessary, so it is used only with your consent.
If you consent, the following cookies may be set:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes individual visitors to measure website usage. | Up to 2 years. |
| _ga_G-705LJ86D0Y | Google Analytics | Maintains analytics session state for the property. | Up to 2 years. |
Analytics data is processed by Google. For more information, see the Google Privacy Policy and how Google uses information from sites that use its services. Paylists does not use advertising, marketing, social-media, profiling or fingerprinting technologies.
The hosting infrastructure used to deliver the Services (Vercel, AWS, Supabase) may use technical cookies or tokens necessary for routing, load balancing, security and basic operation of the platform. These are managed by the underlying providers and are essential to the technical delivery of the Services. They do not collect information about you for analytics, advertising or profiling purposes.
You can also manage local-storage technologies through your browser settings. Most browsers allow you to:
If you block or delete the strictly necessary technologies described above, the Paylists software will not function correctly. In particular, you will not be able to stay signed in.
Browser-specific instructions are available from the providers:
Paylists may update this notice from time to time. Material changes (for example, the introduction of analytics, marketing or other non-essential technologies) will be reflected in an updated version of this notice and accompanied by an appropriate consent mechanism where required by law.
For questions about cookies or local-storage technologies, contact privacy@paylists.com.
EU/EEA data-protection representative communications may be sent to DataRep at datarequest@datarep.com, quoting "Paylists LTD" in the subject line, or through www.datarep.com/data-request. DSA communications may be sent to digitalrequest@datarep.com, quoting "Paylists LTD" in the subject line. DataRep is not the cookie-preference or product-support contact.