PlanCertify
Cookie Policy
Effective: June 13, 2026 · AllSpark Enterprises Ltd.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They allow the website to remember your login state, preferences, and usage patterns. In Canada, cookies that collect personal information are governed by PIPEDA, and CASL governs software that collects personal information or electronic addresses through electronic means.
2. Our Approach to Consent
- Strictly necessary cookies: no consent required — technically essential to deliver the Service you have requested.
- Analytics and tracking cookies: require your consent before being set. We obtain this through our Cookie Preference Centre (site footer).
CASL consent records for analytics cookie choices are retained for 3 years.
3. Cookies We Use
3.1 Strictly Necessary (No Consent Required)
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| sb-access-token | Supabase | Maintains authenticated session | 1 hour |
| sb-refresh-token | Supabase | Silently refreshes access token | 30 days |
| __session | PlanCertify | Server-side session identifier | Session |
These cookies cannot be disabled without preventing login. They are exempt from consent requirements under PIPEDA and CASL as technically necessary to provide the Service you requested.
3.2 Analytics Cookies (Consent Required)
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga / _ga_* | Google Analytics 4 | Distinguishes users and sessions (IP anonymized) | 2 years |
| _gid | Google Analytics | Session distinction | 24 hours |
These cookies are only set after you provide consent through our Cookie Preference Centre. You may withdraw consent at any time.
3.3 Third-Party Payment Cookies
When you interact with Square’s payment form, Square may set its own cookies governed by Square’s Cookie Policy. These are set only when you initiate a payment transaction.
4. CASL and Electronic Addresses
CASL’s anti-spam provisions restrict use of programs that collect electronic addresses through automated means (“address harvesting”). We do not use address harvesting software. Analytics cookies that associate usage data with your account are used solely to improve service delivery and are not used for commercial electronic messaging beyond what you have consented to.
5. How to Control Cookies
5.1 Cookie Preference Centre
Use the Cookie Preference Centre in the site footer to manage analytics cookie preferences at any time. Changes take effect immediately.
5.2 Browser Settings
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions
Blocking strictly necessary cookies will prevent you from logging in.
5.3 Google Analytics Opt-Out
Install the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout
6. Do Not Track and Global Privacy Control
The Service does not currently respond to browser DNT signals. If your browser sends a Global Privacy Control (GPC) signal, we treat this as withdrawal of consent for analytics cookies where GPC is technically detectable.
7. Cross-Border Data Transfers
Analytics data collected by Google Analytics is processed in the US by Google LLC under a DPA with us. For Quebec residents, this transfer is covered by our Privacy Impact Assessment as described in the Privacy Policy.
8. Retention
Cookie data is retained for the periods specified in Section 3. Server-side logs containing IP addresses are retained for 90 days. CASL consent records for analytics decisions are retained for 3 years.
9. Changes to This Policy
We will update this Cookie Policy when we add or remove cookies or change our consent practices. The effective date will be revised accordingly.
10. Contact
Questions about cookies or your privacy rights? stephenlavoie@allsparkenterprisesltd.com