Cookies policy
A short list of the functional cookies we use to keep you signed in and to process payments. We do not run analytics or advertising trackers.
Last updated 28 May 2026.
The short version
We use a small number of functional cookies — the ones needed to keep you signed in and to process a payment. We do not run analytics cookies, advertising cookies, or third-party tracking pixels.
Because everything we set is functional, we do not show a cookie consent banner. You are not being tracked across other websites by anything we control.
What is a cookie?
A cookie is a small file stored in your browser. Websites use them to remember things between page loads — for example, that you are signed in. Cookies set by the site you are visiting are first-party; cookies set by another company whose code is loaded on that page (like a payment provider) are third-party.
Cookies we use
This list reflects what runs on ncattracker.com.au today. If we ever add a new cookie we will update this page first.
| Name | Purpose | Retention | Party |
|---|---|---|---|
| sb-access-token | Keeps you signed in. Issued by Supabase Auth and rotated whenever your session refreshes. | 1 hour (refreshed automatically while you are active) | First-party |
| sb-refresh-token | Used to obtain a new access token without making you sign in again. Issued by Supabase Auth. | Up to 30 days, or until you sign out | First-party |
| ncat-session | A small server-side cookie that holds your current case context (which case you have open) so navigation stays in the right place. | Session only — removed when you close the browser | First-party |
| __stripe_mid / __stripe_sid | Set by Stripe on the checkout page to support fraud prevention on your payment. Only present while you are paying for a case. | __stripe_mid: 1 year. __stripe_sid: 30 minutes. | Third-party |
What we do not use
For the avoidance of doubt, we do not run:
- Google Analytics, Plausible, Fathom, or any other web analytics that sets cookies in your browser;
- Facebook Pixel, LinkedIn Insight, TikTok Pixel, or any other advertising or retargeting tracker;
- Session-replay tools (Hotjar, FullStory, LogRocket and similar);
- Chat widgets that load third-party code;
- A/B testing tools.
Server-side, we keep basic request logs (IP, user agent, timestamp) for security and debugging. These are described in our privacy policy and are not cookies.
How to disable cookies
All modern browsers let you block or delete cookies in their settings. Look for "Privacy", "Site settings", or "Cookies" in your browser's preferences. You can usually block cookies for ncattracker.com.au specifically, rather than turning them off everywhere.
Because every cookie we set is functional, blocking them will break the service: you will not be able to sign in, your session will be lost between pages, and you will not be able to complete a Stripe payment. We do not offer a "cookie-free" mode.
Changes to this policy
If we change which cookies we use, we will update this page and the "last updated" date below the title. If the change involves a new third party processing your data, we will also email account holders before the change takes effect.
NCAT Tracker is not a law firm. This page is general information about how we operate the service. For advice on your specific circumstances, contact a lawyer, LawAccess NSW on 1300 888 529, or your local Community Legal Centre.