mySheet Cookie and Browser Storage Policy
Effective date: 2 October 2026 Version: 1.1
This policy explains how Logix 26 Pty Ltd trading as mySheet (ABN 71 649 099 730) uses cookies, browser storage and requests to other services on our marketing website at mysheet.au and in the mySheet application at app.mysheet.au and in the mySheet mobile app. It should be read with our Privacy Policy.
1. What these technologies are
A cookie is a small piece of data a website asks your browser to keep. Browsers also offer other storage: local storage and session storage (small values kept for a site), and IndexedDB (a larger store a web application can use, for example to work offline). A service worker is a small script a web application can register so that it can receive push notifications. Our service worker is registered only if you enable browser notifications.
Loading something from another company's server, such as a map or an image in an email, sends that company your IP address and basic device details even if no cookie is set.
2. Summary
- We do not set cookies ourselves, either on the marketing website or in the mySheet application. Third-party services we use may set their own, as listed below.
- We do not use advertising or cross-site tracking technologies. Our marketing website uses cookieless analytics that set no cookies and store nothing in your browser (see section 3).
- The mySheet application uses browser storage only to keep you signed in and to make the app work, as listed below.
- Some third-party services we use, such as our sign-in and payment providers, may set their own cookies on their own websites when you use them.
3. Marketing website (mysheet.au)
| Technology | What it is used for | Details |
|---|---|---|
| Local storage: theme | Remembers whether you chose light or dark mode | Stores only the word "light" or "dark". It stays until you clear your browser's site data. |
| Website delivery network | Delivers and protects the website | The delivery network receives your IP address and request details (such as browser type and the page requested) in order to serve the site. It operates globally, so this may be processed outside Australia. |
| Cookieless analytics | Counts visits and which parts of the site are used | Uses no cookies and no browser storage, builds no personal profile and records no typing or screen activity. It sends the page, device type and, for some actions, a short label (for example the demo name). Our own analytics are switched off if your browser sends Do Not Track, or for the rest of that page visit if you add ?no-track to the address. Providers are in the United States and other countries. |
| Delivery-network analytics | Counts page views in aggregate | The website delivery provider adds its own cookieless page-view counting, which records the page, referrer, browser type and page-load timings and receives your IP address. It sets no cookies and does not respond to Do Not Track or ?no-track. |
| Fonts | Display the website's typefaces | Fonts are served from mysheet.au itself. No request is made to a font provider. |
| Contact form | Sends your enquiry to us | The form sets no cookies. What it collects is described in section 17 of our Privacy Policy. |
4. The mySheet application
The mySheet application does not set cookies of its own. It uses the following browser storage.
Local storage (kept until you sign out, clear it, or it is replaced)
| Item | Why it is needed |
|---|---|
| Sign-in session cache from our identity provider, including a refresh token | Keeps you signed in without having to enter your password each time |
| Sign-in session lock | Stops two browser tabs from refreshing your sign-in at the same time |
| Pending invitation token | Remembers an invitation to join an organisation while you finish signing up |
| Location consent flag | Remembers that you have answered the location permission prompt in the app |
| Display preferences | Remembers your theme, dashboard layout and progress through setup steps |
| Xero prompt flag | Remembers whether the Xero connection prompt has been shown |
Session storage (cleared when you close the tab)
| Item | Why it is needed |
|---|---|
| Sign-in transaction state | Completes the sign-in process securely |
| Push notification token | Links your browser to push notifications for the current session |
| Tracking identifiers | Short-lived identifiers the application keeps for the current session. They are not sent to any analytics or advertising service, because the mySheet application uses none. |
| Xero connection verifier | Completes the secure connection to Xero when an administrator connects it |
| Plan, referral and affiliate codes | Carries the plan or referral code you arrived with through to sign-up |
| Form prefill details | Pre-fills sign-up forms with details you have already entered |
IndexedDB
| Item | Why it is needed |
|---|---|
| Offline clock event queue | If you clock on or off without an internet connection, the event (which can include the location captured at the time) is kept on your device until it can be sent to mySheet |
Service worker
If you enable browser notifications, the web application registers a push notification service worker so that your browser can receive mySheet push notifications. It is not registered if you do not enable them. It stores a device token that the push notification service uses to deliver notifications.
5. Other companies' services
Some features involve another company's service, which receives your IP address and device details and may set or read its own cookies on its own website under its own policy:
- our identity and sign-in provider, when you sign in, including if you choose to sign in with Google or Apple;
- our payment processor, when you enter payment details or manage billing;
- a bot-check service, where it is enabled on password sign-in, to check that you are a person;
- a mapping service, when the app shows a map or looks up an address; and
- Xero, when an administrator connects a Xero account.
Our emails. The service emails we send load a font and an image from an external content provider. When you open one of our emails, your email program fetches these, so that provider receives your IP address and device details. You can prevent this by setting your email program not to load remote images.
Error monitoring. When our server encounters an error, a report is sent to our error monitoring provider. We apply filters intended to remove TFNs, BSBs, location, tokens and email addresses from these reports before they are sent; the filters may not remove every occurrence. This does not involve any cookie or storage in your browser.
6. Your choices
- You can clear cookies and site data at any time in your browser settings. If you clear the mySheet application's storage, you will be signed out, and any clock events waiting in the offline queue that have not yet been sent may be lost.
- You can block push notifications in your browser or device settings.
- You can turn off location access, including background location, in your device settings.
- Our website analytics use no cookies or storage. To switch our own analytics off, enable Do Not Track in your browser or add ?no-track to the address. The delivery network's aggregate page counting cannot be switched off this way. We use no advertising technologies.
The storage listed in section 4 is needed for the application to work, so blocking it may stop you from signing in or clocking on.
7. Changes to this policy
If we add or materially change a cookie, storage item or third-party service described here, we will update this policy, with a new effective date and version, before the change goes live.
8. Contact
Questions about this policy can be sent to Privacy Officer, Logix 26 Pty Ltd at privacy@mysheet.au, or by post to PO Box 502, Caloundra QLD 4551.
9. Document details
- Effective date: 2 October 2026
- Version: 1.1
- Previous version: 1.0, effective 30 September 2026