Cookie Policy

Set when you sign in, these keep your session secure and working. They are provided by our authentication platform (Supabase) and cannot be switched off without breaking sign-in.

• PostHog (hosted in the EU) records how the product is used — pages viewed, features clicked — so we can improve it. Person-level profiles are only created after you sign in. Limited session replay runs on our public marketing pages only: everything typed into any input is masked, and replay is switched off entirely inside the app, where client information appears.
• Google Analytics (cookies beginning _ga) gives us aggregate website statistics such as visits and traffic sources.

We run Google Ads. Google's conversion cookies (beginning _gcl) tell us when a sign-up came from one of our ads so we know the advertising works. Where enhanced conversions apply, your email address is hashed (SHA-256) in your browser before anything is sent to Google — the readable address never leaves the page. We do not run third-party ad networks, cross-site tracking pixels, or sell any data.

Card payments and electronic identity verification take place on pages hosted by our providers (such as Stripe), which set their own cookies under their own policies.

• Your browser can block or delete cookies for any site (look for “cookies and site data” in its privacy settings). Blocking essential cookies will prevent sign-in.
• Google offers an opt-out browser add-on for Google Analytics and ad personalisation controls at adssettings.google.com.

Email support@amlmate.com.au. For how we handle personal information more broadly, see the Privacy Policy.