Cookies

1. Why there is no consent banner

Consent banners exist because most sites set cookies that track you for advertising and analytics. GoSmoko does not. We set one strictly necessary cookie so that you stay signed in between pages, which does not require consent under New Zealand, Australian or European rules.

We would rather have this page than a banner you have to dismiss on every device.

2. The cookie we set

• Name: a session cookie set by our authentication layer. It holds a random identifier, not your email or your business details.
• Purpose: keeping you signed in, and protecting the sign-in form against cross-site request forgery.
• Lifetime: it expires when your session does, or when you sign out. Signing out removes it.
• Scope: first-party, marked HttpOnly and Secure, so it cannot be read by scripts and is only sent over HTTPS.

3. What we do not set

• No advertising or retargeting cookies. GoSmoko does not advertise to you and does not sell space to anyone who would.
• No analytics cookies. We do not run Google Analytics or any equivalent on the app.
• No social media pixels, embedded trackers, or session recording tools.
• No cross-site identifiers. Nothing we set can be used to follow you onto another website.

4. The mobile app

The iPhone and Android app does not use cookies at all. It authenticates with a token held in the phone's keychain and keeps its own encrypted database on the device. Nothing about it is readable by another app, and there is no advertising identifier involved.

5. Turning the cookie off

You can block or delete it in your browser settings. Signing in will not work while it is blocked, because there is no other way for the site to know it is still you between pages.

6. Payment and accounting providers

When you connect Stripe, Xero or MYOB, and when your customer opens a Stripe payment link, those companies may set their own cookies on their own pages. That is governed by their policies, not ours. GoSmoko does not embed their scripts in our pages.

7. Questions

Email privacy@gosmoko.com and a person will answer.