DRAFT — for legal review. Not in effect. The whole document must be reviewed by counsel before publication.
EZbudget Cookie Policy
Effective date: October 16, 2026 Website: https://ezbudget.setitsolutions.com
This policy explains how STEL Group LLC ("we") uses cookies and similar technologies (local storage, session storage, SDK identifiers) on the EZbudget website and app. It supplements our Privacy Policy.
Our approach
EZbudget uses only the cookies needed to run and secure the Service. Our traffic analytics are first‑party and cookieless. We do not use advertising cookies, cross-site tracking pixels, or social-media trackers, and we do not sell or share data from cookies.
Cookies and storage we use
| Name / type | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
__session (HttpOnly, Secure) |
EZbudget | Keeps you signed in (server-verified session) | Up to 5 days | Strictly necessary |
ezb_admin_s (HttpOnly, Secure, SameSite=Strict) |
EZbudget | Admin dashboard session (only for the site owner) | Up to 12 hours | Strictly necessary |
| CSRF token | EZbudget | Protects forms and account actions from cross-site attacks | Session | Strictly necessary |
| Firebase Auth storage (IndexedDB / local storage) | Google Firebase | Sign-in state and multi-factor authentication | Until sign-out | Strictly necessary |
| reCAPTCHA / App Check | Bot and SMS-fraud protection on sign-in and sign-up | Per Google | Strictly necessary | |
| Plaid Link storage | Plaid | Runs the secure bank-connection window | Session | Strictly necessary |
| Stripe cookies | Stripe | Fraud prevention and secure checkout on billing pages | Per Stripe | Strictly necessary |
| UI preferences (local storage) | EZbudget | Remembers settings such as theme and collapsed menus | Until cleared | Functional |
[Engineering: keep this table in sync with what the app actually sets before publishing.]
Your choices
- Strictly necessary cookies are required for sign-in, security, and payments. You cannot turn them off in EZbudget, but you can block them in your browser; parts of the Service will then stop working.
- Analytics are first‑party and cookieless. We honor Do Not Track and Global Privacy Control signals and will not record visits when either is present.
- Most browsers let you view and delete cookies. See your browser's help pages.
[If non-essential cookies that require consent are added in the future, or the Service expands outside the U.S., add a consent banner before setting them.]
Third-party policies
- Plaid End User Privacy Policy: https://plaid.com/legal/#end-user-privacy-policy
- Stripe Privacy Policy: https://stripe.com/privacy
- Google Privacy Policy: https://policies.google.com/privacy
Changes and contact
We will update this policy when the technologies we use change. Questions: support@setitsolutions.com · STEL Group LLC, 336 E University Pkwy #1113, Orem, UT 84058.