Cookie Policy
Effective 2026-07-14 · Last updated 2026-08-08 · Version 2026-08-08
1. The short version
EffortlessVisa uses essential cookies and browser storage to keep the service secure and remember your choices. Optional analytics stays off unless you affirmatively allow it. Declining analytics does not change access to the site or paid service. We do not use advertising pixels, remarketing, autocapture, or session replay.
2. What we use and why
| Name | Type | Purpose | Duration |
|---|---|---|---|
| ev_session_user_id | Essential cookie | Keeps you signed in; signed and HTTP-only so it can't be read by scripts. | Up to 30 days or until logout |
| ev-admin.* | Essential cookie | Signs in administrators (staff only). | Up to 8 hours |
| ev-analytics-consent-v1 | Consent record (localStorage) | Remembers whether you allowed or declined optional analytics and the policy version shown with that choice. | Until you change the choice, the consent version changes, or you clear browser storage |
| ev-marketing-attribution-v1 | Optional campaign attribution (localStorage) | After you allow optional analytics, remembers only an approved campaign and ad-variant or placement label so a later purchase can be counted toward that campaign. It does not contain your name, email, case answers, documents, or search phrase. | Up to 30 days, until you decline optional analytics, or until you clear browser storage |
| PostHog in-memory identifier | Optional analytics memory | Counts an opted-in public-page visit during the current browser session. It is not written to persistent browser storage by our configuration. | Current browser session only |
Note: the keys that unlock your encrypted case content live only in your browser’s memory while a case is open and are never written to a cookie or persistent storage.
3. Optional analytics
When you select “Allow optional analytics,” PostHog measures a small list of events on public marketing pages, such as a page view, starting or completing the public pathway finder, clicking a filing button, and reaching a fixed visible-time milestone. We send the public page path, broad workflow label, button location, campaign tags when present, and whether the page stayed visibly open for 10 seconds, 30 seconds, 1 minute, or 3 minutes. We do not send an exact duration, scrolling, or activity inside page sections, and timing pauses while the tab is hidden.
If you arrive through one of our approved paid campaigns or placements, we may also keep that fixed campaign and ad-variant or placement label in your browser for up to 30 days. If you later buy a filing project, those labels can be attached to the Stripe checkout so we can calculate campaign cost per customer. We do not retain or attach the search phrase. Declining optional analytics deletes the saved attribution label.
We do not run PostHog inside login, signup, account, case, questionnaire, evidence, payment, support, or admin routes. We do not send names, email addresses, case identifiers, questionnaire answers, uploaded documents, support messages, or full page URLs. We disable autocapture, person profiles, persistent analytics storage, advertising features, and session replay. We also tell PostHog not to add GeoIP data and require its project setting to discard client IP data before production analytics is enabled.
4. Controlling storage
Use “Cookie choices” in the site footer to allow or decline optional analytics at any time. You can also clear or block cookies and site storage in your browser settings, but blocking the essential session cookie will sign you out and prevent the app from working. See the Privacy Policy for how we handle the rest of your information.
This is self-help software, not legal advice, and this page is not a substitute for review by a licensed privacy and consumer-protection attorney. See the Immigration Self-Help & Legal Disclaimer.