Legal
Cookie Policy
Last updated: 31 July 2026
The short version
miaHQ uses only cookies and browser storage that are strictly necessary to sign you in and run the app securely. We do not use advertising cookies, cross-site trackers, or third-party analytics. Because our cookies are strictly necessary, they don't require a consent banner under PECR — but we believe you should know exactly what's set, so here's the full list.
What we set, and why
| Name / kind | Set by | Purpose | Type | Retention |
|---|---|---|---|---|
| Authentication session | Supabase (our auth provider) | Keeps you securely signed in between pages and requests | Strictly necessary | Persists to keep you signed in |
| Integration connect state | miaHQ | A short-lived security token used only while an administrator connects a payroll integration (e.g. Xero) | Strictly necessary | Cleared when the connect flow finishes |
| Preference storage (e.g. chosen theme) | miaHQ | Remembers display preferences so the app looks the same next time | Functional | Until you clear it |
Cookies the marketing site sets
The public marketing site (getmiahq.com) sets no cookies of its own and uses no analytics or tracking. Its forms (early-access, newsletter sign-up) post directly to our own servers. The one exception is the booking page (/book): if you open it, the embedded Cal.com scheduler may set its own cookies to run the booking widget — those are Cal.com's, described in Cal.com's own cookie and privacy notices, and only load on that page.
What we don't do
- No advertising or retargeting cookies.
- No cross-site or social-media tracking pixels.
- No third-party analytics or session-recording tools.
- No selling of any data these cookies touch.
Managing cookies
Because our cookies are strictly necessary, blocking them will stop you signing in or using core features. You can still control cookies through your browser settings — most browsers let you see, block or delete cookies per site. If we ever introduce non-essential cookies, we will ask for your consent first and update this policy.
Changes and contact
We'll update this policy if what we set changes, and note the "last updated" date. Questions: privacy@getmiahq.com. See also our Privacy Policy.