Cookies Policy
Last updated: 3 November 2025
1. Introduction
This Cookies Policy explains how Square Plan Limited ("we", "us", "our") uses cookies and similar tracking technologies on our website at squareplan.com (the "Website") and in our SquarePlan App (the "App").
By using our Website or App, you consent to the use of cookies as described in this policy. This policy should be read alongside our Privacy Policy.
2. What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website or use an application. They allow the website or app to recognise your device and remember information about your visit.
Cookies can be "persistent" (remaining on your device until deleted or expired) or "session" cookies (deleted when you close your browser or app).
3. Why We Use Cookies
We use cookies for the following purposes:
- Essential Cookies: To enable core functionality such as user authentication and security.
- Analytics Cookies: To understand how visitors use our Website and App, helping us improve our services.
- Functional Cookies: To remember your preferences and settings.
4. Cookies We Use
4.1 Strictly Necessary Cookies
These cookies are essential for the Website and App to function properly. They enable core features such as user authentication, security, and session management.
Authentication Cookies (SquarePlan App)
Purpose: To keep you logged in to your account and maintain your session.
Provider: Supabase (our authentication provider).
Cookie Names: sb-access-token, sb-refresh-token
Duration: Session or up to 30 days (persistent).
Legal Basis: These cookies are strictly necessary for the App to function and do not require consent under UK GDPR.
4.2 Analytics Cookies
We use analytics cookies to understand how visitors interact with our Website and App. This helps us improve our services and user experience.
Matomo Analytics (Self-Hosted)
Purpose: To collect anonymised usage statistics (pages visited, time spent, navigation patterns).
Provider: Self-hosted Matomo on our own infrastructure.
Cookie Names: _pk_id, _pk_ses
Duration: Up to 13 months for _pk_id (visitor ID), 30 minutes for _pk_ses (session).
Data Protection:
- IP addresses are anonymised (last 2 bytes removed) before storage.
- No cross-site tracking or data sharing with third parties.
- Self-hosted on our infrastructure (no data sent to external services).
- Does not track users across different websites.
Legal Basis: Due to IP anonymisation and self-hosting, these cookies do not require explicit consent under UK GDPR and the Privacy and Electronic Communications Regulations (PECR), as they are used solely for internal analytics and pose minimal privacy risk.
4.3 Marketing and Advertising Cookies
We use marketing and advertising cookies to measure the effectiveness of our advertising campaigns and to show you relevant advertisements. These cookies require your consent before being set and you can manage your preferences through our cookie consent banner.
Meta Pixel (Facebook Pixel)
Purpose: To measure advertising effectiveness, track conversions from Facebook/Instagram ads, and build audiences for remarketing.
Provider: Meta Platforms Ireland Limited (Facebook).
Cookie Names: _fbp, fr, and others.
Duration: Up to 90 days.
Data Collected: Page views, button clicks, form submissions, purchase events, and other interactions. May include hashed email addresses if provided.
Privacy Policy: https://www.facebook.com/privacy/policy/
Legal Basis: Consent required under UK GDPR and PECR.
Google Ads (Google Advertising)
Purpose: To measure advertising effectiveness, track conversions from Google Ads, and enable remarketing to show you relevant ads across Google's advertising network.
Provider: Google Ireland Limited.
Cookie Names: _gac_*, _gcl_*, _gad_*, IDE, test_cookie, and others.
Duration: Varies from session cookies to up to 2 years depending on the specific cookie.
Data Collected: Ad views, ad clicks, conversions, website visits, and interactions. Used to measure campaign performance and show personalised ads.
Privacy Policy: https://policies.google.com/privacy
Legal Basis: Consent required under UK GDPR and PECR.
4.4 Script Management - Cloudflare Zaraz
We use Cloudflare Zaraz to manage and load scripts efficiently on our Website. Zaraz helps improve page load times and security by loading third-party scripts from Cloudflare's edge network rather than directly from external domains.
Purpose: To manage the loading of analytics and other scripts securely and efficiently.
Provider: Cloudflare, Inc.
Data Processed: Technical data such as IP addresses, browser information, and page views (processed transiently for script delivery).
Privacy Policy: https://www.cloudflare.com/privacypolicy/
Note: Zaraz itself does not set cookies; it manages the loading of other tools (such as Matomo, Meta Pixel, and Google Ads) which may set cookies as described above.
5. Third-Party Cookies
We use third-party cookies from Meta (Facebook) and Google for advertising and marketing purposes. These cookies are only set with your consent and can be managed through our cookie consent banner. The data collected by these third-party cookies is subject to the respective privacy policies of Meta and Google.
Our analytics are handled by our self-hosted Matomo instance, which does not share data with external advertising networks.
6. Cookie Consent Requirements
Under UK GDPR and PECR, certain types of cookies require explicit consent before being set:
6.1 Cookies That Do NOT Require Consent
- Strictly Necessary Cookies: Essential for the Website and App to function (e.g., authentication cookies).
- Analytics Cookies (Matomo): Our Matomo setup uses IP anonymisation and does not track users across different websites. These cookies are considered low-risk and do not require explicit consent under UK GDPR and PECR, in line with ICO guidance on analytics cookies.
6.2 Cookies That DO Require Consent
- Marketing and Advertising Cookies: Meta Pixel and Google Ads cookies require your explicit consent before being set.
6.3 Cookie Consent Banner
When you visit our Website, you will see a cookie consent banner allowing you to:
- Accept all cookies (including marketing cookies)
- Reject non-essential cookies (only strictly necessary and analytics cookies will be set)
- Customise your cookie preferences
You can change your cookie preferences at any time by accessing the cookie settings from our footer or by clearing your browser cookies.
Reference: Information Commissioner's Office (ICO) guidance on cookies: ICO PECR Guidance
7. How to Manage Cookies
You can control and manage cookies in several ways:
7.1 Browser Settings
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is being set. However, please note that blocking essential cookies may prevent you from using certain features of our Website or App.
Learn how to manage cookies in popular browsers:
7.2 Opt-Out of Analytics
If you wish to opt out of Matomo analytics tracking, you can do so by enabling "Do Not Track" in your browser settings. Our Matomo instance respects Do Not Track signals.
7.3 Clearing Cookies
You can delete cookies that have already been set on your device through your browser settings. Note that this may log you out of the App and you will need to sign in again.
8. Changes to This Cookies Policy
We may update this Cookies Policy from time to time to reflect changes in our use of cookies or legal requirements. Any changes will be posted on this page with a revised "Last updated" date.
We encourage you to review this policy periodically.
9. Contact Us
If you have any questions about this Cookies Policy or our use of cookies, please contact us:
Contact Form: squareplan.com/contact-us
Post: Square Plan Limited, Belmont, Belmont Road, Uxbridge, England, UB8 1HE
10. Further Information
For more information about cookies and how to manage them, visit: