Cookie Statement

This English version is a translation provided for your convenience. In case of any discrepancy between the Dutch and English text, the Dutch Cookieverklaring prevails.

TimeToBill uses functional and strictly necessary cookies only. We set no analytics, tracking, social-media or advertising cookies. Our self-hosted website analytics works without cookies or other browser storage for tracking. The existing operation without a cookie-consent banner therefore remains unchanged.

Which cookies do we use?

Cookie	Purpose	Duration	Domain
PARAGLIDE_LOCALE	Remembers your explicit language choice (nl or en).	400 days	The TimeToBill host visited
ttb_portal_session	Authenticates your portal session after a successful magic-link login.	Session (2 hours); cleared on logout or TTL expiry	manage.timetobill.nl
ttb_account_csrf	Protects against cross-site request forgery on forms in the customer portal.	2 hours	manage.timetobill.nl

The session and CSRF cookies are set with the HttpOnly, Secure and SameSite=lax flags. Their contents cannot be tied to you personally without the corresponding server-side state; at logout the server-side state is invalidated. The language preference is functional and readable by the browser so the website can continue directly in the selected language.

Cookieless website analytics

We use Plausible Community Edition to measure aggregate pageviews, outbound-link clicks, file downloads and form submissions on the public timetobill.nl website. This analytics is not active on the customer portal or internal operations environment. Plausible is self-hosted on VPS infrastructure operated by STB Services. We do not use the Plausible Analytics SaaS service.

The analytics code sets no cookie and writes no tracking ID to localStorage or sessionStorage. Query strings and URL fragments are removed before transmission. Form values, names, email addresses, order data and payment amounts are not sent. Revenue tracking is disabled. The Privacy Statement explains the briefly processed technical data and retention period.

What do we not use?

• No Google Analytics, Matomo, Plausible SaaS or any other external analytics service.
• No Facebook pixel, LinkedIn pixel, Google Ads remarketing or comparable advertising trackers.
• No third-party cookies of any kind.
• No persistent or cross-site device fingerprinting or comparable tracking techniques.

If we use non-essential cookies or comparable tracking storage in the future, we will first introduce appropriate consent choices and update this statement.

Managing cookies

You can delete or block cookies at any time via your browser settings. Note that blocking our strictly necessary cookies will render the customer portal unusable, because you will no longer be able to stay logged in.

Relationship to the Privacy Statement

This statement describes only cookie processing. The wider context — which personal data we process, for which purpose and for how long — is described in the Privacy Statement.

Changes

Changes follow semantic versioning. Material changes (for example adding a new cookie category) will be announced on this page at least 30 days in advance. Older versions remain permanently retrievable at /legal/cookies/<version>.

Changelog

Version	Effective from	Change
2.0.0	2026-09-04	Documented self-hosted, cookieless Plausible website analytics and fully recorded the existing language, session and CSRF cookies.
1.0.0	2026-04-28	First published version.

---

STB Services — Parallelweg 30, 5223 AL 's-Hertogenbosch, the Netherlands — Chamber of Commerce (KvK) 30226252 — VAT NL001685860B73 — hello@timetobill.nl