Where Does My Money Go?

Cookie Policy

Last updated: July 30, 2026

1. What this covers

This policy explains how we use cookies, local storage, session storage, and similar browser technologies. It should be read with our Privacy Policy and Terms of Service.

On our United Kingdom site, and for visitors in the UK and European Economic Area, we ask for your consent before setting optional analytics cookies. On other regional sites, analytics cookies are on by default until you reject them; you still get the same accept / reject controls.

2. Cookie categories

Essential (always on)

  • Authentication and session storage to keep you signed in securely.
  • Preference storage for profile, display, and app settings.
  • A country/region cookie (wdmg_viewer_country) set at our content delivery network so we can show you the correct regional site.
  • Security and bot-protection storage used during sign in and sign up.
  • Payment-related cookies or storage when subscription checkout is enabled.
  • Diagnostic storage for error reporting and reliability.

Analytics (optional)

  • Google Analytics 4 (GA4) — if analytics are allowed, we load Google's tag with Consent Mode. GA4 may set cookies such as _ga and _ga_* to measure page views and site usage. We do not use GA4 for advertising or ad personalisation. Google is a separate processor; see our Privacy Policy.
  • PostHog — product analytics and session replay (when enabled) to understand how visitors move through the site, including paid landing pages. PostHog may use browser storage such as ph_* keys. We use our own EU-hosted proxy; PostHog is a separate processor.
  • First-party visit analytics — a local, non-identifying attribution id and visit id together with UTM campaign parameters (and Google Ads gclid when present), sent to our own API so we can understand how visitors reach and use the site. This runs only when analytics cookies are allowed.

3. Third parties

Supabase, Stripe, Cloudflare Turnstile, Google (Analytics), PostHog, and other service providers may use cookies or similar storage when their services are loaded. Essential third-party storage may load without analytics consent; Google Analytics and PostHog load only when analytics cookies are allowed. Their use is governed by their own policies.

4. Managing your choices

Use to change your preferences at any time. You can also block or delete cookies and local storage in your browser settings. Some parts of the app may stop working if required authentication, security, or preference storage is removed.

If you reject analytics cookies, we keep Google Analytics in denied mode via Consent Mode, opt PostHog out of capturing, and do not run our optional first-party page-view analytics.