Cookies are small text files placed on your device when you visit a website. We also use similar technologies — localStorage and sessionStorage (browser storage that persists data on your device) and tracking pixels — and this policy covers those too. Where we say "cookies" below, we mean all of these unless stated otherwise.
| Cookie | Purpose | Category | Expires |
|---|---|---|---|
| toprate_cookie_consent | Records your cookie consent choice | Strictly necessary | 12 months (180 days if you decline) |
| csrf-token / __Host-csrf-sig | Protect forms and requests against cross-site request forgery | Strictly necessary | 24 hours |
| oidc_* | Keeps you signed in — used only if your browser blocks normal browser storage | Strictly necessary | Up to 30 days |
| cap_1 | Secures a payment session you start from a secure payment link we send you (encrypted; our servers only) | Strictly necessary | 15 minutes |
| tr_send_market / tr_send_country | Detects whether to show you Australian (AUD) or New Zealand (NZD) pricing | Functional | 1–24 hours |
| tr_geo_override | Remembers a country/market you chose manually | Functional | 24 hours |
| trt_attrib | Remembers which ad or link brought you to us, so we can measure our advertising | Marketing | 90 days |
We also store limited data in your browser's localStorage/sessionStorage: your sign-in session, your consent choice, in-progress form details while you register or use the calculator, and interface preferences (e.g. dark mode, dismissed banners). Session storage is cleared when you close the tab.
With your consent (see section 5), the following third parties set cookies or receive data when you use the Sites:
| Service | Provider | What it does | Category | Typical cookies |
|---|---|---|---|---|
| Google Tag Manager | Google LLC (US) | Manages the tags below | Analytics/Marketing container | — |
| Google Analytics 4 | Google LLC (US) | Usage statistics (pages visited, features used) | Analytics | _ga, _ga_* — up to 13 months |
| Google Ads | Google LLC (US) | Measures ad conversions; remarketing | Marketing | _gcl_au — 90 days |
| Meta Pixel | Meta Platforms, Inc. (US) | Measures ad conversions from Facebook/Instagram; remarketing | Marketing | _fbp (90 days), _fbc |
| Chatwoot live chat | Self-hosted by us (Australia) | Powers the support chat widget; remembers your conversation | Functional | Browser storage token |
Conversion measurement may include details of a transaction you complete (such as amount, currency and a transaction reference). Google and Meta process data in the United States — see our Privacy Policy for how overseas disclosures are handled.
We self-host our web fonts; visiting the Sites does not send font requests to Google.
We will update this page when our use of cookies changes and revise the "Last updated" date. Material changes will be flagged on the Sites.
Questions or complaints: admin@topratetransfer.com.au, or via the contact details in our Privacy Policy. If you are unsatisfied with our response you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).