1. Who we are
This policy applies to taxovate.pt and the client workspace. The company responsible is BOOST2FUTURE UNIPESSOAL LDA (NIPC PT518461467), registered office Rua do Vale Cardal Nº142, 6120-021 Envendos, Mação, Santarém, Portugal, which operates Taxovate.
It is based on Article 5(3) of the ePrivacy Directive (2002/58/EC) as transposed in Portugal by Article 5 of Lei n.º 41/2004, and on the General Data Protection Regulation (GDPR). It should be read with our Privacy Policy, which explains what we do with personal data in general.
2. What cookies and similar technologies are
A cookie is a small text file that a website stores in your browser. “Similar technologies” include local storage and session storage, which let a page keep small pieces of information in your browser as well. We call all of them “cookies and browser storage” in this policy.
Some are needed for the site to work. Some remember a choice you made. Some measure how the site is used and need your permission first.
3. The categories we use
Strictly necessary. They keep you signed in, protect your account, make payments work and remember your cookie choice. The site cannot do what you asked without them, so they are set without asking. You cannot switch them off in our settings; you can block them in your browser, but sign-in and payment will then not work.
Preferences you set. They remember a choice you made, such as the language or the light and dark appearance, or your progress through setup and the product tour. We store them only as the result of something you do, and they are not used for anything else. They are exempt from the consent requirement as user-requested, and are listed here so nothing is hidden.
Analytics. They tell us how visitors use our public pages. They are OFF unless you allow them, and nothing is loaded or stored for them before you do. We use Microsoft Clarity for this, on public pages only: never on sign-in, account or client workspace pages.
Marketing. We do not use advertising or marketing cookies, and we do not let third parties track you across other websites through ours.
4. Every cookie and storage entry we use
This list is generated from the same list our software is tested against, so a new cookie cannot be added to the site without appearing here. “Cookie” rows are cookies; “local storage” stays until cleared; “session storage” goes when you close the tab.
Strictly necessary
| Name | What it does | Set by | How long |
|---|---|---|---|
| __Host-mba_session - cookie | Keeps you signed in. Scripts on the page cannot read it. | Taxovate | 1 hour, or up to 7 days if you choose to stay signed in |
| __Host-mba_csrf - cookie | Protects your account against forged cross-site requests. | Taxovate | 1 hour, or up to 7 days if you choose to stay signed in |
| Sign-in service cookies - cookie | Set by our own sign-in service to secure the sign-in flow, including sign-in with Google. | Taxovate | The sign-in session |
| taxovate:consent:analytics:v1 - local storage | Remembers your cookie choice, with the version and the date. | Taxovate | 12 months |
| mba-idempotency:* - session storage | Stops a form being submitted twice if you press the button again. | Taxovate | Until you close the tab |
| taxovate-pay-* - session storage | Keeps a payment you have started working if you reload the page. | Taxovate | Until you close the tab |
| taxovate-bt-* - local storage | Keeps the bank-transfer details you were shown on this browser. | Taxovate | Until you clear it |
| __stripe_mid - cookie | Fraud prevention for card payments. Only on the payment page. | Stripe (third party) | 12 months |
| __stripe_sid - cookie | Fraud prevention for card payments. Only on the payment page. | Stripe (third party) | About 30 minutes |
| __cf_bm - cookie | Security: tells people apart from automated traffic, only where Cloudflare needs to. | Cloudflare (third party) | About 30 minutes |
Preferences you set
| Name | What it does | Set by | How long |
|---|---|---|---|
| taxovate_lang - cookie | Remembers your language, or the language of the address you opened. | Taxovate | 12 months |
| fs_lang - cookie | Remembers the language you chose on our questionnaires and forms. | Taxovate | 12 months |
| mba_theme - cookie | Remembers whether you chose light, dark or system appearance. | Taxovate | 12 months |
| taxovate-theme, taxovate-theme-updated-at - local storage | Remembers your light, dark or system appearance, and when you set it. | Taxovate | Until you clear it |
| taxovate.pricing-choice - local storage | Carries the plan you picked from the pricing cards to registration. | Taxovate | Up to 7 days |
| taxovate-welcome-state-v2:*, taxovate-welcome-complete-v2:* - local storage | Remembers your progress through setup after you register. | Taxovate | Until you clear it |
| taxovate-client-tour-v2, taxovate-client-tour-step-v1 - local storage | Remembers whether you finished the product tour, and the step you reached. | Taxovate | Until you clear it |
Analytics (only if you allow them)
| Name | What it does | Set by | How long |
|---|---|---|---|
| _clck - cookie | Microsoft Clarity: recognises your browser, to link page views into recordings. | Microsoft | 12 months |
| _clsk - cookie | Microsoft Clarity: groups your page views into one session. | Microsoft | 1 day |
| CLID, ANONCHK, MR, MUID, SM - cookie | Set by Microsoft’s domains while Clarity runs: identifiers and short-lived checks used by Clarity and Microsoft. | Microsoft (third party) | Up to 13 months |
Marketing: none. We use no advertising or marketing cookies.
5. What we measure without storing anything
Visit counting. We count visits to our public pages with Plausible Analytics, which we host ourselves in the European Union. It sets no cookies and stores nothing on your device, and it honours Global Privacy Control and Do Not Track: while either is on, nothing is counted from your browser. How it works and our legal basis are in section 11 of the Privacy Policy.
Error reports. If something breaks in your browser, a technical error report is sent to Sentry in its EU region. It sets no cookies and stores nothing on your device.
6. How to accept, reject or change your choice
The first time you visit a public page we ask about analytics. “Reject non-essential” and “Accept all” are equally easy to press, and “Preferences” lets you decide by category. If you do nothing, analytics stays off.
You can change or withdraw your choice at any time, as easily as you gave it: use Cookie preferences here, or the “Cookie preferences” control in the footer of every public page. Withdrawing stops analytics and removes its cookies from your browser; it does not affect anything done before.
If your browser sends Global Privacy Control or Do Not Track, we treat it as a refusal of analytics and do not show the banner.
You can also delete or block cookies in your browser settings. If you block the session cookie you cannot sign in, and if you block the preference cookies the site will not remember your language or appearance.
7. How long we keep your choice and the cookies
Each entry’s lifetime is in the table above. Your cookie choice is recorded on your own device only (nothing is sent to us), with the version of this policy it was made under and the date. We ask again after 12 months, and whenever the categories or what they do change in a way that needs a new yes.
8. Changes to this policy
If we add a cookie, change what a category does or change a retention period, we update the table and the date at the top of this page, and ask for your choice again where the change needs it.
9. Contact and complaints
For any question about cookies or to exercise your rights, write to clientes@taxovate.pt. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.