Cookie Policy
What is stored on your device, who receives data and how to choose.
Last updated: 16 October 2026
MARCO SOFTWARE PTY LTD (ABN 69 701 588 061; ACN 701 588 061) operates this website. This notice covers cookies, localStorage, sessionStorage and optional measurement scripts. See our Privacy Policy for processing, overseas providers and your rights.
Your choice comes first
Optional analytics and advertising measurement are off until you opt in. Reject optional keeps the service available. You can choose each purpose separately, or use at any time to change or withdraw your choice. Signing up or accepting our terms does not consent to optional tracking or marketing emails.
We remember acceptance and rejection for 180 days in this browser. The record contains the notice version, selected purposes, and choice and expiry timestamps. Notice version: 2026-10-16.1. We ask again after expiry or a material change to the purposes or providers. Clearing site data or using another browser also resets the choice.
Global Privacy Control (GPC) and Do Not Track signals disable both optional categories, including when an earlier choice allowed them. Essential storage still operates. If browser storage is blocked, a choice may last only for the current page.
Essential and requested-feature storage
These items support authentication, security or features you request. They do not track you for advertising.
| Name / provider | Purpose and storage | Duration |
|---|---|---|
sb-*-auth-token / Supabase | Authentication session in localStorage; associated auth-flow storage may be used during sign-in. | Session is refreshed while valid; removed on sign-out or when site data is cleared. Access-token expiry does not itself clear browser storage. |
marco_consent_v3 / MARCO | Consent record in localStorage. | Valid for 180 days; ignored after expiry and replaced when you choose again. |
rc_console, marco_locale | Requested market, product domain and language preferences in first-party cookies. | Up to one year, renewed when the preference is saved. |
theme, marco.locale | Requested appearance and language in localStorage. | Until changed or cleared. |
rc.lastCheckedFormula | Most recent screening inputs and result in localStorage, to pre-fill a quote you request. | Usable for 24 hours; expired data is removed on the next read, or when cleared. Avoid shared devices for confidential work. |
regcheck_onboarded:*, regcheck-history-filter:* | Onboarding and history preferences in localStorage. | Until cleared. |
rc360_chat_open, passport-later, formulation notification flags | Panel and dismissal state in sessionStorage. | Until the browser tab session ends. |
rc.adminKey | Admin-only access state in sessionStorage after it is supplied. | Until cleared or the tab session ends. |
Hosting and network providers may use necessary security storage when a challenge is required. Payment-provider storage applies only if you open a provider-hosted checkout; see the notice shown there. Checkout is separate from this cookie choice.
Optional providers
| Purpose / provider | Data and storage | Duration / details |
|---|---|---|
| Analytics — Google Analytics | Public-page visits, browser/device information and basic interaction events. Cookies include _ga and _ga_*. | Configured for up to 180 days without extending expiry on each visit. Google privacy information. |
| Analytics — Cloudflare Web Analytics | Public-page performance and request metadata through a JavaScript beacon; no analytics cookies or localStorage identifiers. | Measurements sent during the page visit. Automatic single-page navigation measurement is disabled. Cloudflare analytics information. |
| Advertising measurement — Google Ads | Advertising attribution and signup conversions; may use _gcl_* cookies and Google-domain storage. Personalised advertising is disabled. | First-party attribution cookies commonly last up to 90 days; Google-domain lifetimes depend on the cookie and your Google settings. Google cookie details. |
Providers load only when their category is accepted and the service is configured. Optional scripts are limited to public marketing pages for signed-out visitors; private tools and authentication pages start without them. We do not enable session replay. Essential server security and error logs are described separately in the Privacy Policy.
Google and Cloudflare may process information outside Australia. Provider retention of received data is different from the lifetime of a cookie on your device; see their linked notices and our privacy policy.
Withdrawing consent
Open , then select Reject optional or save individual choices. We stop optional loading, clear recognised optional cookies on this domain and reload the page when needed to unload running scripts. Your sign-in storage is preserved. Other open tabs apply a saved change too.
We cannot directly remove cookies on Google-owned domains. You can clear them in your browser or use Google’s privacy controls. To request deletion of personal data already received by us or our providers, contact privacy@trustmarco.com; we will handle the request and coordinate with relevant recipients as applicable. Withdrawing consent does not affect the lawfulness of earlier processing.
Browser settings can also clear or block storage. Blocking essential authentication storage may prevent sign-in. Questions or complaints: contact us.