1. Current position
The public marketing and legal pages do not currently use analytics, advertising or social-media tracking. We therefore do not display a consent banner that would imply optional trackers are present. Signed-in features use strictly necessary authentication cookies and first-party browser storage for the service a user requests.
2. Inventory
| Technology | Purpose | Typical duration | Status |
|---|---|---|---|
Supabase authentication cookies (sb-…-auth-token, sometimes split into chunks) | Sign-in, session refresh, security and tenant-authorised requests | Session or the provider-configured authentication lifetime; refreshed while signed in and cleared on sign-out/expiry | Strictly necessary |
| Local storage preferences | Appearance, form defaults, dismissed guidance and product preferences | Until cleared or replaced | Requested functionality |
| Local workflow state | Draft workflows, review flags and feedback preferences | Until completed, cleared or replaced | Requested functionality |
| HMRC device identifier in local storage | Stable client-device identifier used when building HMRC-required fraud-prevention data | Until browser storage is cleared | Necessary for the requested HMRC connection |
| Session storage | Temporary drafts, active workflow progress, navigation continuity and display preferences | Normally until the tab/browser session ends | Requested functionality |
3. Your controls
Browser settings can delete or block cookies and storage. Blocking authentication cookies prevents sign-in; clearing local or session storage can remove unfinished work, device continuity and preferences. It does not delete financial records stored in the account. Sign out to end the active AtlastFMS session on a shared device.
4. Optional technology and changes
We will update this inventory before adding a new browser technology. If analytics, advertising or another non-essential technology is introduced, it will remain off until the user has received clear information and given any consent required by PECR and data protection law. Consent will be as easy to withdraw as to give.
Questions: contact@atlastfms.com.