Analytics and cookies

What is measured

If you accept the prompt on your first visit, the site records:

• the pages you view, and the order you view them in;

• the page or site that referred you here;

• the campaign parameters on the link you arrived by (utm_source, utm_medium, utm_campaign, utm_term, utm_content and ref), which tell us which letter or listing the link came from;

• the country and region your connection comes from, worked out from the connection and not stored with it;

• your browser and device type;

• how quickly each page loaded for you.

Our named PostHog events contain a random visit code, approved page, campaign and action names, an environment label and a synthetic-test label. They contain no name, address, filing ID, typed answer or full URL. We do not create a PostHog person profile or track you on other websites.

Google Analytics receives fixed page categories, approved campaign and action names, and environment and synthetic-test labels. Our page events use rebuilt addresses without query strings, fragments, article slugs or referring addresses. Google’s enhanced measurement also records supported website interactions, such as scrolling, outbound links, downloads, form interactions and search terms when present. Form interaction events do not include the values you type. We do not send email addresses, filing details or the PostHog visit code to Google. Advertising purposes, Google signals and advertising personalisation are disabled.

For the waitlist, PostHog counts valid form submission attempts. Google counts requests accepted by the waitlist service; this does not mean an email address has been confirmed or a unique person has signed up. We also count views of the check-email and confirmed pages under fixed labels. These analytics totals cover only consenting visitors; someone may confirm in another browser. The separate server waitlist totals are the more complete count.

How it works

Nothing loads until you accept. Until then the site sends no measurement at all, and the prompt is the only thing asking.

Vercel serves its page and speed measurement from this site's address. After analytics consent, the site also loads PostHog software and the Google tag, sending named events to PostHog's EU service and website events to Google Analytics. This site keeps a random visit code in this browser tab for up to 30 minutes and passes it to the application on a link followed within that time.

If you accept application analytics, the application keeps the transferred anonymous visit code in its browser tab for up to 24 hours, or until the tab closes, you withdraw analytics or sign out.

The site stores your analytics choice. If the Analytics notice changes to include a new provider, an earlier acceptance needs to be renewed; an earlier refusal remains off. Replay keeps its separate saved choice. After acceptance, PostHog uses a short-lived anonymous visit code in this browser tab, with the first approved campaign for that visit. Google uses the cookies taxpost_ga and taxpost_ga_9D721ZMH4Y on this host only, with a 30-minute expiry renewed by activity. Google's browser identifier differs from our tab visit code, so the two providers' visit totals may differ. Withdrawing Analytics stops collection of new activity, removes the tab code and clears those Google cookies. Google may finish sending events it recorded while your permission was on; withdrawal does not delete data already received.

Session replay

If you accept session replay through Accept all or Settings, PostHog records how you use our website and application, including clicks and scrolling. We mask private page text, fields and identifying element attributes. Approved public styling keeps clicks aligned with controls; approved fixed interface labels and public consent instructions remain readable. Forms, images, video and embedded content are blocked where needed. We do not record console logs or network request contents.

You may accept or decline replay independently of analytics, and withdraw either choice at any time. Recorded page addresses exclude query details and customer or filing identifiers. Withdrawing stops new collection, but does not automatically delete recordings already received.

Links to the portal

When you follow a link from this site to the customer portal, the site counts the click on its own server as part of an anonymous total for that page and that link. This uses no cookie, stores no identifier and reads nothing from your device, so it happens whether or not you accepted measurement.

The link passes approved campaign details to the application. After analytics consent, it also carries a random visit code, an approved action name and a short timestamp so a consenting application visit can be joined to the site action. The application checks its own analytics choice before using that code.

Changing your choice

The controls at the top of this page change your analytics and replay choices separately at any time. Withdrawing analytics stops Vercel, PostHog and Google measurement; withdrawing replay stops recording. If both are off, PostHog stops collecting and its anonymous visit code is cleared.

Questions about any of this: email hello@taxpost.uk. The privacy notice explains who processes the measurement data and how long it is kept.