This website sets no cookies at all, which is why you are not being asked to accept any. It runs no analytics and no tracking, and its fonts are served from our own server, so reading it contacts no one else.
This website
The pages on cleanitall.io set no cookies and store nothing on your device. We do not measure visits with any analytics service.
The CleanItAll app
The app at app.cleanitall.io is built to work on a phone with no signal. To do that it keeps some things in your browser: two small cookies, a few entries in the browser's local and session storage, a local database of your round, and a cache of the app itself. They keep you signed in, let the app work offline and remember choices you make in it. None of them tracks you across other sites or is used for advertising.
None of them needs your consent: each is strictly necessary to give you the app you signed up for. The app's error reporting records what went wrong, not your session: it does not record replays of your screen.
Cookies
| Name | What it is for | How long |
|---|---|---|
oauth_nonce | Set when you start connecting Xero, QuickBooks, Sage, HMRC or an inbox, and checked when you come back, so the connection can only be finished in the browser that started it. Sent only to the app's server, and unreadable by scripts. | 15 minutes, or until the connection finishes |
sidebar_state | Remembers whether you left the side menu open or closed. | 7 days |
Local storage
| Name | What it is for | How long |
|---|---|---|
token | Keeps you signed in. | Until you sign out, or the sign-in expires |
user | Your name, email address and account settings, so the app can open before it has heard back from the server. | Until you sign out |
customer_portal_tokencustomer_portal_datacustomer_portal_branding | Keep a business's customer signed in to the customer portal, with the business's name and logo. google_link_intent is kept briefly while they link a Google account. | Until they sign out of the portal |
| Drafts | A half-filled new customer, job or quote, and the business setup steps, so nothing is lost if the page reloads or the signal drops. | Until the form is saved, and at most 7 days |
menuCollapsedCategoriespushPromptDismissed | Which menu groups you have folded away, and whether you have dismissed the prompt to turn on notifications. | Until you clear the site's data |
Session storage
| Name | What it is for | How long |
|---|---|---|
| Invoice request | A reference for an invoice you are creating, so a double tap or a retry on a poor connection makes one invoice, not two. | Until the tab is closed |
Your round, kept on the device
| Name | What it is for | How long |
|---|---|---|
cleanitall-offline | A database in your browser holding copies of your jobs, customers and invoices, and the changes waiting to sync, so the round works with no signal. | Emptied when you sign out |
| App files | The app's own code, styles and fonts, kept by its service worker so it opens with no signal and updates itself. | Replaced by each update |
api-cache | Copies of recent answers from the server, so screens you have already opened still show with no signal. | Up to 24 hours, and deleted when you sign out |
help-screenshots-cache | The screenshots in the help pages. | Up to 30 days |
Signing out empties the offline database and the copies of server answers, so the next person to use a shared phone doesn't see your customers.
Cookies set by other services
When you use a feature provided by another company, that company may set its own cookies on its own pages. This happens only where the feature appears, not across the app.
- Stripe, on its payment pages, to process the payment and prevent fraud.
- GoCardless, on its pages for setting up a Direct Debit.
- Google, if you sign in with a Google account, and where the app shows a Google map.
- Xero, Intuit, Sage, HMRC and Microsoft, on their own sign-in pages when you connect an account with them.
Clearing it
You can block or delete cookies, and clear everything a site has stored, in your browser's settings. This website will carry on exactly as before, because it stores nothing. In the app, clearing the site's data signs you out and removes the offline copy of your round. Let the app sync first: any changes made with no signal that have not yet reached the server are lost when the offline copy is cleared.
More detail
Our privacy notice explains what personal data we handle, why, who else sees it, and how to exercise your rights. Questions about either notice go to privacy@cleanitall.io.