Loading...
Loading...
Last updated: 20 March 2026
This Cookie Policy explains how Stagex Pty Ltd uses cookies and similar technologies on stagex.com.au and the Stagex web app. It supplements our Privacy Policy.
Effective Date: [DATE] Last reviewed by counsel: [DATE] Version: 1.0 (first draft — pre-counsel) Operator: Stagex Pty Ltd, ACN 696 624 987
This Cookie Policy explains how Stagex Pty Ltd ("Stagex", "we", "our", "us") uses cookies and similar technologies on stagex.com.au and the Stagex web app (collectively, the "Service"). It supplements our Privacy Policy at /legal/privacy-policy.
We provide this Cookie Policy and a cookie consent banner even though the Privacy Act 1988 (Cth) does not currently mandate a banner, because we believe transparency is the right baseline and because some Marketplace Customers (homeowners) accessing the Service may be in jurisdictions (EU/UK) where consent is required.
These are essential for the Service to function. Without them, you cannot sign in or use the milestone workflow.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
sb-access-token | Supabase session — keeps you logged in | First-party, session | Session + refresh until 30 days |
sb-refresh-token | Supabase refresh — silent re-auth | First-party, persistent | 30 days |
__stagex_csrf | CSRF protection token | First-party, session | Session |
__cf_bm | Cloudflare bot management (set if our edge uses Cloudflare) | Third-party (Cloudflare), session | 30 minutes |
Stripe __stripe_* / m | Fraud prevention and 3DS handling, set only when you reach a payment page | Third-party (Stripe), persistent | Up to 13 months |
| Zai session cookies | Set only during the escrow funding / dispute flow | Third-party (Zai), session | Session |
These help us understand product usage. We disable them until you opt in via the cookie banner.
| Cookie / SDK | Purpose | Set by | Duration |
|---|---|---|---|
ph_* (PostHog) | Product analytics, feature-flag evaluation | PostHog (EU region) | 12 months |
_ga, _ga_* | Google Analytics 4 — site-wide visit metrics on marketing pages | 13 months |
| Cookie / SDK | Purpose | Set by | Duration |
|---|---|---|---|
| Sentry SDK local storage | Capture JavaScript errors and stack traces (no PII by default) | Sentry | Session |
| Sentry session replay | Replays your session for debugging — opt-in only | Sentry | 30 days |
We do not currently use third-party advertising cookies (e.g. Facebook Pixel, Google Ads). If we introduce them, we will update this Policy and the banner with at least 30 days' notice and require opt-in.
3.1 Via our cookie banner. When you first visit, you can accept, reject, or customise non-essential cookies. You can reopen the banner at any time via the "Cookie settings" link in the footer of stagex.com.au.
3.2 Via your browser. Most browsers let you block or delete cookies. For instructions, see:
3.3 Effect of blocking. If you block strictly necessary cookies, the Service will not work (you cannot sign in). Blocking analytics, error monitoring, or marketing cookies will not affect functionality.
3.4 Opt-out of third-party analytics directly.
do-not-track browser header, or email privacy@stagex.com.au.3.5 Do Not Track signal. We honour the browser-level Do Not Track signal by treating it as a reject for analytics and marketing categories.
Embedded widgets — for example, an embedded Stripe payment element or a Zai dispute widget — may set their own cookies when rendered. Those cookies are governed by the third party's privacy policy:
We do not control those cookies.
We may update this Cookie Policy from time to time. Material changes will be notified at least 14 days before taking effect via in-app banner and email to registered users. The "Effective Date" at the top will be updated.