LEGAL INFORMATION · UPDATED 10 SEPTEMBER 2026
Cookies and browser storage
What the website stores on your device and how you can manage it.
1. Current use
VumaBill uses browser storage for sign-in, security, company selection, display settings and recovery copies of unfinished quotes and invoices. Recovery copies can contain document information, are scoped to your account and company, remain on this device and are offered for up to 30 days. Save or discard a draft to remove its recovery copy. Signing out clears recovery copies on this browser; expired copies are removed when the app opens. Clear site data when leaving a shared device. Optional first-party usage measurement is on by default unless you have previously turned it off. You can turn it off in Appearance & preferences and save your choice. It records named actions, a company reference, a pseudonymous user reference and the UTC day, without document contents or amounts. It does not use advertising trackers or session recordings. Turning it off stops future collection. Closing a notice or continuing to browse is not consent.
2. Marketing measurement
When optional usage measurement is enabled, a tagged VumaBill campaign link is remembered for this tab session, for up to 24 hours. We associate the first tagged visit in that session with a new account and server-confirmed VumaBill subscription payments. Our private marketing system receives a pseudonymous account reference, campaign, channel and subscription amount; it does not receive names, emails, card information or your customer invoices. Test payments are excluded from real revenue. Disable Help improve VumaBill in Appearance and preferences to stop future browser collection. Do Not Track is also respected. This measurement cannot identify every cross-device or untagged visit.
3. Advertising measurement
A cookie banner is shown on your first visit asking whether we may load the Google Ads tag (gtag.js) to measure which ads bring visitors who go on to become customers. It is off until you accept, and Do Not Track skips the banner and keeps it off automatically. Accepting sets a Google Ads cookie and shares your IP address, browser information, pages visited and, when you complete a paid checkout, the order value with Google. Declining or later withdrawing consent stops the tag loading on your next page load; it does not remove a cookie Google has already set, which you can clear using your browser’s site-data settings. Withdraw or change your choice by clearing this device’s stored choice in those same browser settings, which brings the banner back.
4. Performance storage
When optional performance monitoring is enabled, Firebase uses browser storage for an installation identifier and monitoring configuration. Google receives technical page-load and request timing data and selected action timings. Turn off Help improve VumaBill in Appearance and preferences to stop new measurements; data already queued or collected may still be processed. Clearing browser site data removes local storage but does not delete data already received by the service.
5. Sign-in and security
Firebase Authentication uses browser storage, including IndexedDB, to maintain authentication state. Firebase App Check and Google reCAPTCHA Enterprise use security tokens and may set the _GRECAPTCHA cookie for risk analysis. These services help protect accounts and requests. They are not switched off through a marketing-cookie preference. Blocking their storage in your browser may prevent sign-in or protected actions. Provider-managed lifetimes vary with authentication and security settings.
6. Company and display preferences
Session storage under vumabill:<user-id> remembers the selected company for a browser session. Local storage may hold vumabill:menu-collapsed, vumabill:preferences:<user-id> and quoteEditorColumnWidths for layout and formatting. Local storage remains until replaced or cleared; session storage normally ends when the tab’s session ends. Some preferences are also saved to your account and may be restored after sign-in.
7. Other third-party connections
Google Fonts loads the website’s fonts and receives normal network request information. Google Places loads when address lookup is used. Online payment pages may have their own provider storage and privacy notices. A connection to a third party is not necessarily an analytics cookie. Consult the relevant provider’s notice for its processing.
8. Your controls
Use your browser’s site-data settings to inspect or remove cookies, local storage and IndexedDB. Clearing authentication storage signs you out. The button below clears only VumaBill’s cached display preferences on this device; account-saved preferences may return when you next sign in. Advertising measurement (see above) only runs after you accept the cookie banner; declining, ignoring it or clearing this device’s stored choice keeps it off or switches it off again.
Manage this device
Security and sign-in storage are managed through your browser’s site-data controls.