Skip to content

Cookie Policy

Last updated: July 13, 2026

1. Your choice

Optional analytics and advertising measurement stay off until you select Accept analytics. Selecting Reject analytics keeps PostHog, Tolt, Google Ads measurement, and Sentry error replay from loading. Your choice applies whether you are signed in or browsing the public site.

You can change your choice at any time. If you withdraw consent, OpenBudget removes known first-party optional tracking cookies and browser storage, then reloads the page so optional scripts are no longer active. Data already sent to a provider follows that provider's retention and deletion process. Your choice does not affect your account, bank connections, spreadsheets, or subscription.

2. Necessary storage

OpenBudget uses necessary cookies and browser storage for authentication, security, bank and spreadsheet connection flows, billing, interface preferences, and the consent choice recorded by this banner. These items support features you request and cannot be disabled through the analytics setting.

  • Authentication and security: Keeps you signed in and helps protect your account.
  • Connection and billing flows: Preserves the state needed to complete Plaid, Google, Microsoft, and Stripe requests you start.
  • Consent preference: Stores accepted or rejected for 180 days so we can respect your choice.

3. Optional product analytics

If you accept, PostHog measures page views, product interactions, device and browser details, and session activity. Network requests include an IP address, which PostHog can use to derive an approximate country or region. Signed-in activity may be associated with your account so we can understand adoption and diagnose product issues.

PostHog may provide session replay when that feature is enabled in our analytics project. We use replay to investigate usability and technical problems. All page text and input values are masked in replay.

4. Referral and advertising measurement

If you accept, Tolt can record a referral identifier when you arrive through a partner link. We use it to attribute a later subscription to the referring partner.

On the production site, Google Ads can measure whether an ad leads to a subscription. We do not load the Google Ads tag when you reject analytics or when your browser sends a Global Privacy Control signal. Google Ads measurement may be treated as a sale or sharing of personal information under some U.S. state privacy laws.

5. Infrastructure and security

Our hosting and network providers, including Cloudflare, process IP addresses and request metadata to deliver the site, prevent abuse, and maintain security. This processing is necessary to operate the service and is separate from the optional analytics choice. The consent banner does not change crawler access or search indexing rules.

Sentry receives browser error details, device and browser data, and relevant request context when the site fails. We use these operational reports to diagnose errors. Sentry error replay loads only after you accept analytics, with page text, input values, and media masked or blocked.

6. Providers

7. Contact

For privacy questions, email support@openbudget.sh. You can also read our Privacy Policy.