Cookie & Storage Policy

1. Summary

This website, customer portal, driver workspace and staff workspace use strictly necessary technologies and a small number of preference settings. Based on our audit of the live application, no analytics, advertising, profiling, retargeting or third-party tracking technology is loaded by us, and none is set before you interact with the site. Because no non-essential tracking runs, no consent banner is presented; if we later introduce any technology that requires consent, it will not run until you have given that consent.

2. Strictly necessary

These are required for the service to work and cannot be switched off in the app.

• Authentication session (browser local storage, key beginning sb-) — stores your signed-in session and refresh token so you stay signed in and your account data loads securely. Removed when you sign out.
• Step-up / two-factor authentication state — held within the same session record and used to enforce administrator step-up authentication.
• Security and anti-abuse controls — request rate limiting on public endpoints (quote, tracking, mapping and API) is applied server-side and is not stored in your browser.

3. Preferences

These remember a display choice inside signed-in workspaces. They contain no personal data beyond the setting itself.

• tsl-sidebar-collapsed (local storage) — whether the workspace navigation is expanded or collapsed.
• sidebar_state (first-party cookie) — the same navigation preference for components that read it during rendering.
• tsl.include-test-records (local storage, staff only) — whether sandbox records are shown alongside live data.
• tsl.dispatch.ack (local storage, staff only) — which dispatch alerts a dispatcher has already dismissed.

4. Analytics

None set by us. We do not load analytics, measurement or heatmap scripts on this website or in the application.

5. Marketing and advertising

None set by us. We do not use advertising, retargeting, social pixels or profiling technologies.

6. Third-party services used inside the app

• Google Maps Platform — address lookup and map display. When a map or address field loads, Google may set its own strictly necessary technologies to deliver and secure that service.
• Stripe — card and wallet payments are completed on Stripe's hosted checkout, where Stripe sets its own necessary and fraud-prevention technologies.
• Hosting and platform — our hosting and database providers may set strictly necessary technologies for security, routing and load balancing.

See our Privacy Notice for how we work with these providers.

7. Managing storage

You can block or delete cookies and site data in your browser settings. Blocking strictly necessary items will prevent sign-in, the customer portal and the driver workspace from working. Signing out clears your session record.

8. Changes

We re-audit this list when the application changes. If a non-essential technology is introduced, this page will be updated and consent will be requested before it runs.