Cookie and Tracking Policy
This Cookie and Tracking Policy explains how duely uses cookies and similar technologies when you visit our website or use our application portal.
1. What are Cookies?
Cookies are small data files placed on your computer or mobile device when you visit a website. They allow a website to recognise your device and store information about your session or preferences.
2. Types of Cookies We Use
2.1 Essential Platform Cookies (Strictly Necessary)
These cookies are required for the duely application to operate and cannot be switched off in our systems. They are set in response to actions you take, such as logging in or filling in forms.
- Authentication: to remember your session and verify you are logged in.
- Security: to help protect your session and prevent Cross-Site Request Forgery (CSRF) attacks.
- Tenant Context: to route you to your Firm's isolated data environment.
If your browser blocks these cookies, the duely platform will not function.
2.2 Performance and Analytics Cookies
We use these cookies to understand how visitors interact with our website and application, so we can improve the user experience.
- PostHog: product analytics within the duely application (for example, measuring which features are used most).
- Google Analytics: website traffic measurement on our public marketing pages.
2.3 Cookie Details
| Cookie Name | Provider | Purpose | Type | Expiry |
|---|---|---|---|---|
.AspNetCore.Session | duely | Authentication session | Essential | Session |
.AspNetCore.Antiforgery | duely | CSRF protection | Essential | Session |
duely_tenant | duely | Tenant routing context | Essential | Session |
cookie_consent | duely | Stores your cookie preferences | Essential | 1 year |
ph_* | PostHog | Product analytics (feature usage) | Analytics | 1 year |
_ga, _ga_* | Website traffic measurement | Analytics | 2 years | |
_gid | Distinguishes unique visitors | Analytics | 24 hours |
3. Cookie Consent and Management
When you first visit our public website, you will see a cookie consent banner.
- Consent. Analytics cookies require your explicit opt-in.
- Opt-Out. Essential cookies do not require consent as the platform cannot function without them. You can manage your preferences for non-essential cookies at any time via the "Cookie Preferences" link in our website footer or portal settings.
- Browser Settings. You can also configure your web browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.
4. Third-Party Tracking
We do not sell cookie data to third-party advertising networks. Data captured via PostHog or Google Analytics is used by duely to improve our product and services.
Data retention by analytics providers:
- PostHog: analytics data is retained for 12 months and is pseudonymised (no raw personal identifiers are stored). PostHog data is processed in the United States and the European Union.
- Google Analytics: data is retained for 14 months with IP anonymisation enabled. Google Analytics data is processed in the United States.
5. Contact
For questions about this policy, contact us at privacy@duely.com.au.
6. Governing Law
This Cookie and Tracking Policy is governed by the laws of New South Wales, Australia.