Ledgeforge cookie notice
DRAFT 0.4 for attorney review, 22 October 2026. Not published. Not in force.
Effective date: [DATE OF PUBLICATION]
1. What this covers
This notice explains the cookies and similar browser storage used by the Ledgeforge login and portal (login.ledgeforge.co.za), Accounting, FinSight, Loadwyse and Billing pages, and our public websites ([ledgeforge.co.za], myfinsight.co.za, loadwyse.co.za).
A cookie is a small text file a website saves in your browser. Some cookies are needed for a site to work; others are optional.
2. Inside the products: strictly necessary only
When you sign in and use the products we use only strictly necessary cookies. They cannot be switched off, because without them you could not sign in or stay signed in. We do not use advertising, tracking or analytics cookies inside the products, and no consent banner is shown there.
| Cookie or storage | Set by | Purpose | Lasts |
|---|---|---|---|
| Central sign-in session [NAME] | login.ledgeforge.co.za | keeps you signed in once across every product; ends when you sign out anywhere | [length of central session] |
| Sign-in state [NAME] | login.ledgeforge.co.za and each product | protects the sign-in step against forgery (checks the "state" value) | minutes, deleted after sign-in |
| Product session [NAME] | accounts., finsight., app.loadwyse.co.za | keeps you signed in to that product; checked against the central session at least every 5 minutes | [length] |
| Security token (CSRF) [NAME] | each product | protects forms against cross-site requests | session |
| Cloudflare Turnstile | challenges.cloudflare.com, on the sign-in page only | checks that a person, not a program, is signing in. May use browser storage or a short-lived cookie | [Cloudflare to confirm] |
| Preferences (for example light or dark theme, a remembered filter) | each product, local browser storage | remembers your choice on that device; never sent to anyone | until cleared |
[BUILD TEAMS: each product to supply its exact cookie names, flags (Secure, HttpOnly, SameSite) and lifetimes before publication. Fonts: if Manrope is loaded from Google Fonts, the browser contacts Google; recommendation is to serve the font from our own servers so no third party is contacted.]
3. Public websites: optional cookies only with your consent
Our public websites may, if we decide to use them, set optional cookies to measure visits ("analytics"). If they do:
- a consent banner appears on your first visit, with Accept and Reject buttons of equal size and prominence, and a link to this notice;
- no optional cookie is set, and no analytics script is loaded, until you press Accept;
- if you close the banner without choosing, that counts as Reject;
- your choice is remembered for [12] months, after which we ask again;
- a "Cookie settings" link in every page footer lets you change your mind at any time, and withdrawing consent deletes the optional cookies we set;
- we keep a record of each choice (date, time, choice, the notice version, and a random identifier, not your name) for [12] months as proof of consent, then delete it.
The banner never appears inside the products, because the products use no optional cookies. If the public websites use no optional cookies, no banner is shown at all.
[ATTORNEY: South Africa has no cookie-specific law; POPIA applies where cookies identify a person. Please confirm the approach above is sufficient and whether consent records are needed at all if analytics is anonymous. Note: the current FinSight site keeps a "cookie_consent_log" (65 rows in the last snapshot); its retirement must follow the old site's notice.]
[JEFFREY: Decide whether the public sites use analytics at all. Recommendation: no analytics at launch; then this section reduces to "we use no optional cookies".]
4. Controlling cookies
You can delete or block cookies in your browser settings. Blocking strictly necessary cookies will stop you signing in.
5. Contact
Questions: the Information Officer, as in our Privacy Notice.