What we use
Cookies, local storage, first-party anonymous analytics by default, and Meta / LinkedIn advertising measurement when you opt in.
A cookie is a small file a site stores on your device. We also use local storage and session storage, which work similarly. This policy covers all of them, plus mobile SDK identifiers.
First-party anonymous analytics (PostHog) capture pageviews and UTM parameters by default without requiring consent, using cookieless/memory-only persistence suitable for basic web analytics. When you accept the analytics category, we also load the Meta (Facebook) Pixel and the LinkedIn Insight Tag (home page) for marketing attribution. We do not run open advertising networks, and we do not sell or share your browsing with data brokers for their own use.
The categories we set
Strictly necessary always on. First-party analytics on by default (can opt out). Advertising trackers opt-in only.
- Strictly necessary: session token, CSRF token, load balancing, and your cookie choice itself. These cannot be switched off, and under the Privacy Act and the equivalent New Zealand and United States rules they do not require consent.
- Preferences: saved filters and last workspace. Off means the product forgets your settings between visits.
- Analytics and advertising: first-party anonymous pageview analytics (PostHog, on by default in cookieless mode) plus the Meta Pixel and LinkedIn Insight Tag for advertising attribution (opt-in only). Declining analytics stops Meta and LinkedIn immediately, and opts you out of first-party analytics. Accepting enables all three.
- Performance: error and crash reporting so we can fix what breaks.
Named cookies and trackers
The short list.
- kw_session — strictly necessary — session — keeps you signed in.
- kw_csrf — strictly necessary — session — protects form submissions.
- kwirl_cookie_consent — strictly necessary — 12 months — remembers your cookie choices.
- kw_prefs — preferences — 12 months — saved filters and workspace.
- kw_announcement_dismissed — preferences — until cleared — remembers that you closed the announcement bar. Only stored if you accept preference storage.
- PostHog (ph_*) — analytics — memory only (no persistent cookies) when you have not opted in; stores a distinct ID in localStorage when you accept analytics — first-party anonymous pageview and UTM tracking. Project token phc_riNEnts9n5omxUfxiED4tyoaeR3MEfQzGjzFnWzMRRBJ.
- Meta Pixel (fbevents.js / _fbp) — analytics — set by Meta when you accept analytics — used to measure Facebook and Instagram campaign performance. Pixel ID 232266694159480.
- LinkedIn Insight Tag (insight.min.js / li_*) — analytics — set by LinkedIn when you accept analytics and visit the home page — used to measure LinkedIn campaign performance. Partner ID 9967924.
- kw_perf — performance — 30 days — sampling key for crash reporting.
Your controls
Change your mind whenever, from the footer. GPC opts you out automatically.
The consent banner appears on first visit and your choices are stored for 12 months. Cookie settings in the footer reopens it at any time.
You can also block or clear cookies in your browser. Blocking the strictly necessary ones will sign you out and break parts of the product.
We honour Global Privacy Control (GPC) and Do Not Track signals as an automatic opt-out of all analytics (first-party PostHog and third-party Meta/LinkedIn), which satisfies the United States state opt-out requirements. If your browser sends GPC, first-party analytics are disabled silently on your first visit.
Mobile apps
Operating system prompts control analytics.
In the mobile apps we ask through the operating system prompt on iOS and Android, and we do not use the advertising identifier on either platform. The same categories apply: first-party analytics are on by default if you grant the prompt, and can be disabled in settings.
Questions about this policy
Write to legal@kwirl.com.au for anything on this page, privacy@kwirl.com.au for a privacy request, or security@kwirl.com.au to report a vulnerability. Postal mail reaches us at Kwirl Australia Pty Ltd, Australia.