Client Cookie Policy

Scope

• Authenticated user sessions in TimenBill workspaces.
• Workspace settings, feature preferences, and role/session controls.
• Operational telemetry and security controls tied to product use.

Storage categories

• Essential authentication cookies and browser storage used for sign-in continuity and session state.
• Security storage used for anti-fraud checks, abuse prevention, and account protection.
• Preference storage used for locale, UI selections, workspace choices, and feature settings.
• Reliability and diagnostics storage used for product performance monitoring and telemetry.
• Integration/session storage used by connected Microsoft or Google workflows when enabled by the customer.
• Advertising identifiers for free-plan workspace ad delivery and measurement where applicable.

How storage is used

• Maintain secure login state and prevent unauthorized access.
• Preserve navigation context, workspace selection, and user preferences.
• Detect unusual activity and enforce access controls.
• Measure product performance and investigate reliability issues, including through Application Insights or similar tooling.
• Support ad delivery/measurement in free-plan experiences as described in our policies.

Third-party technologies

• Identity providers may set cookies during authentication sequences on their own domains.
• Connected Microsoft or Google services may use cookies or browser storage as part of authorized email/calendar workflows.
• Payment and communication providers may set cookies as part of embedded product workflows.
• Analytics or advertising providers may process identifiers where enabled and legally permitted.

Customer and user controls

• Administrators can configure workspace features and access settings that influence cookie use.
• Users can clear local browser storage, but this may sign them out or reset preferences.
• Where required, controls are provided for non-essential analytics and advertising technologies.
• If browser settings or ad blockers prevent required free-plan banner delivery, access to an ad-supported workspace may remain limited until the banner can load or the workspace upgrades.
• Paid plans are ad-free and do not use ad-delivery cookies for in-product advertising.

Do Not Track and Global Privacy Control

We honor Do Not Track and Global Privacy Control signals where required by law and implement region-specific privacy controls accordingly.

Retention

• Session storage is cleared when sessions end, unless browser/session restoration is used.
• Persistent identifiers and preference records may remain until they expire or are deleted by the user or an admin.
• Operational logs and security telemetry may be retained under our retention and compliance requirements.

Policy changes

We may revise this policy as product capabilities and legal requirements evolve. Changes are posted with an updated effective date.

Contact