Cookie Notice
Effective date: September 28, 2026
Deductify uses essential cookies to run and secure the signed-in service, plus the browser storage described below.
Essential cookies
- sessionid: keeps you signed in. The configured session lifetime is up to 14 days, although it may end sooner.
- csrftoken: helps prevent unauthorized cross-site requests.
Optional Google sign-in — October 23, 2026 supplement: when you start Google sign-in, deductify_oauth_google binds the sign-in response to the browser that requested it. This essential, HTTP-only security cookie expires after ten minutes and is cleared when the sign-in response is handled. It is not an advertising identifier.
These cookies are necessary for account and security functions. The app does not use advertising or cross-site tracking cookies.
Optional complimentary-report invitation — October 26, 2026 supplement: after you explicitly enter an offer, deductify_promotion_entry connects that entry to an eligible new account. It is an essential, HTTP-only cookie that lasts up to seven days, not an advertising identifier. The email-verification token is removed from the address bar and held only in the open page’s memory; we do not save it in local or session storage. Entering the offer does not turn on optional measurement, subscribe you to marketing, or reserve a complimentary place. See the Privacy Notice for offer records and retention.
Appearance preference
If you choose a color theme, we save that choice in this browser’s local storage under deductify-appearance. It is not used for tracking or sent to your account. You can change it with the color theme control or remove it by clearing this site’s browser data. Without a saved choice, the site uses light mode.
Privacy choice and optional measurement — October 5, 2026 supplement
When you choose whether to allow measurement in the footer’s “Privacy choices,” we save that preference under deductify-usage-choice in local storage until you change it or clear browser data. Measurement is off by default. If you allow it and the service has measurement enabled, session storage holds a random visit identifier under deductify-usage-session, together with its creation time, consent version, screen-size group, and broad traffic-source group. It expires after 24 hours or when the browser tab’s session ends. We send public-page visits, approximate active time, scroll-depth groups, and limited workflow events, not raw URLs, keystrokes or form answers. Measurements are retained for up to 30 days. The expanded version requires a fresh opt-in, even if you previously allowed workflow measurement.
For an opted-in purchase, the visit may be linked to that purchase for up to 30 days to measure completed payments and report downloads. Turning measurement off clears the visit identifier from this tab and requests deletion of its measurement data and purchase link. A random withdrawal marker may remain for up to 30 days to reject delayed events. Global Privacy Control or Do Not Track keeps optional collection off. These controls do not affect essential payment and account records.
If a withdrawal request cannot reach the service, a local storage entry beginning with deductify-usage-withdrawal: retains the random visit identifier only so the app can retry deletion. Older entries under deductify-usage-withdrawals are migrated into these separate retry markers. Each is removed after successful deletion or when you clear this site’s browser data; it is not used to resume measurement.
Your controls
You can block or delete cookies in your browser, but blocking essential cookies prevents account sign-in and saved-study features from working. See the Privacy Notice for more information.
Optional ad purchase measurement — updated October 10, 2026
This independent choice is off by default and does not load Google browser tracking or set advertising cookies. We save your choice under deductify-ads-choice in local storage. Earlier usage or web-analytics permission does not enable it. Global Privacy Control and Do Not Track keep it off.
After you allow this option, session storage under deductify-ads-context can hold a Google click identifier captured on our homepage, calculator, or public report guide. Once our server accepts that identifier, the browser replaces it with an opaque, signed attribution capability. The context expires no later than 28 days after the original capture, or when the tab’s session ends. No property answers or full URLs are stored in this context.
Local storage entries beginning with deductify-ads-grant: or deductify-ads-withdrawal: retain random withdrawal capabilities, status and the original expiry so another tab can cancel pending linked measurements and failed cancellations can be retried. They do not contain the Google click identifier or purchase details. They expire after at most 28 days and are removed on the next visit when expired, or when you clear browser data; cancellation does not extend their expiry. Choosing Keep ad measurement off stops future collection and requests cancellation, but cannot erase conversions already imported into Google. See the Privacy Notice for the limited purchase information that may be imported with this choice.