Cookie Policy

1. What are cookies?

Cookies are small text files a website places on your device to remember information between visits. They're used for logging in, remembering preferences, and understanding how a site is used.

2. Cookies we use

ShiftHub uses a deliberately small set of cookies:

Name	Purpose	Type	Lifetime
shifthub_session	Keeps you logged in	Strictly necessary	Session (expires at browser close) or 2 weeks with "remember me"
XSRF-TOKEN	CSRF protection on form submissions	Strictly necessary	Session
sf_locale	Remembers your language preference	Functional	1 year
sf_trial_ack	Tracks whether you've dismissed trial-end reminders	Functional	14 days

Strictly-necessary cookies do not require consent under POPIA s11. Functional cookies improve your experience but are not essential.

3. Third-party cookies

The marketing website itself sets no third-party cookies. We self-host our analytics and our fonts are served from fonts.bunny.net (a privacy-respecting font CDN that does not set cookies).

The following third-party services may set cookies only on specific pages of the authenticated application:

• PayFast — on billing pages, to process payment. See PayFast's privacy policy.

4. Analytics approach

We use Plausible Analytics (self-hosted) for aggregate usage metrics. Plausible:

• Does not use cookies.
• Does not collect personal data or IP addresses (they're hashed server-side and discarded).
• Is GDPR and POPIA-compliant by default — no consent banner required.

No third-party advertising trackers, Meta pixels, or Google Analytics. Not now, not ever.

5. Your choices

• Block all cookies: you won't be able to log in to ShiftHub. Strictly-necessary cookies are required for authentication.
• Block functional cookies: the app will work but won't remember your language preference between sessions.
• Clear cookies: use your browser's clear-data feature. You'll be logged out.
• Do Not Track signal: we respect DNT for non-essential cookies (none of ours are DNT-sensitive).

Most browsers offer cookie controls: Chrome · Safari · Firefox.

6. Changes to this policy

We'll update this page if we add or remove a cookie. The "Last updated" date at the top reflects the current version. Material additions (e.g., analytics provider) will be announced by email to active-subscription admins.