Cookie Policy
Last updated: 9 March 2026
1. Overview
Cuppa uses essential cookies that are strictly necessary for the service to function. Within the app (app.cuppa.tax), we also use optional analytics cookies to understand how people use the product and improve it. Analytics cookies are only set if you give explicit consent via the cookie banner. We do not use any advertising or tracking cookies.
Our marketing site (cuppa.tax) does not use any cookies or analytics tracking.
2. What cookies we use
| Name | Purpose | Duration | Type |
|---|---|---|---|
| next-auth.session-token | Keeps you signed in. Contains an encrypted session identifier. | Session | Essential |
| next-auth.csrf-token | Protects against cross-site request forgery attacks. | Session | Essential |
| next-auth.callback-url | Remembers where to redirect you after signing in. | Session | Essential |
3. Analytics cookies (consent required)
These cookies are only set within the app (app.cuppa.tax) after you click "Accept" on the cookie banner. If you decline, none of these are loaded.
| Service | Purpose | Provider |
|---|---|---|
| Mixpanel | Product analytics. Helps us understand which features are used and where people get stuck. | Mixpanel Inc. |
| Google Analytics 4 | Traffic analysis. Helps us understand where visitors come from and which pages are most useful. | Google LLC |
| Microsoft Clarity | Session replays and heatmaps. Helps us identify usability issues and improve the interface. | Microsoft Corp. |
4. Local storage
In addition to cookies, Cuppa stores the following data in your browser's local storage:
| Key | Purpose | Required by |
|---|---|---|
| cuppa_fp | Stores device information (browser, screen size, timezone) for HMRC fraud prevention headers. HMRC requires all MTD software to collect and transmit this data. | HMRC (legal obligation) |
| cookie-consent | Remembers that you have seen the cookie banner. | Cuppa |
5. Third-party cookies
Apart from the analytics services listed above (which require your consent), Cuppa does not set any other third-party cookies. During the Google sign-in flow, Google may set its own cookies according to its own privacy policy. These are not controlled by Cuppa.
6. Managing cookies
You can withdraw analytics consent at any time by clearing your browser cookies and selecting "Decline" when the banner reappears. Disabling essential cookies will prevent the service from working (you won't be able to stay signed in). All modern browsers allow you to manage cookies through their settings:
- Chrome: Settings > Privacy and security > Cookies
- Firefox: Settings > Privacy & Security > Cookies
- Safari: Preferences > Privacy
- Edge: Settings > Cookies and site permissions
7. More information
For more about how we handle your data, see our Privacy Policy. If you have questions, email support@cuppa.tax