Cookies

Last updated 31 August 2026.

One cookie, and it is the sign-in session. There is no banner to click, because there is nothing here to consent to.

The one cookie

When you sign in, TradeClear gives your browser a session cookie. It is what keeps you signed in as you move between pages. Without it you would have to enter your password on every click.

It is a signed token and nothing more. It carries no name, no email address and no identifier that means anything on another site. It is set with three flags:

• HttpOnly, so no script on the page can read it.
• Secure, so it is only ever sent over HTTPS.
• SameSite, so another site cannot make your browser send it.

Signing out clears it. So does closing the session from your side. We can also invalidate every open session at once, which signs everyone out.

What there is not

No analytics cookie. No advertising cookie. No pixel from a social network. The sign-in session is the only cookie anywhere on this site.

The marketing pages you are reading now set nothing at all. You can browse the whole public site, including every guide, without a single cookie being stored.

Counting visits without a cookie

We do count visits, on the public pages and on the dashboard. Cloudflare Web Analytics does it, and it is the one script on this site that comes from somewhere else. It is worth being plain about what it does.

It records the page that was opened, the site you arrived from, roughly where in the world the request came from, and what kind of browser and device it was. It sets no cookie and writes nothing to your browser. It builds no profile, and it cannot tell that the same person came back tomorrow or follow anyone to another site.

Cloudflare serves every page here, so it already handles every request whether the beacon runs or not. What the beacon adds is a count we can read. No roster, no trade name and no document is ever part of it.

Trade contractors

If you are a trade contractor who got a text asking for your WSIB number and a photo of your certificate, the page that link opens sets no cookie. There is no account and no sign-in. You send the two things and you are done.

Our outreach links

A link of the form tradeclear.ca/go/… in an email or a post tells us whether anyone followed it. It records the campaign code, the time, whether the request looked like a person or a mail scanner, and the site that referred it. It sets no cookie, stores no identifier, and cannot connect one visit to another. The privacy policy covers this in full.

Stripe

Paying for a plan sends you to Stripe's own checkout, on Stripe's own domain. Stripe sets cookies there under its own policy, which is on its site. Card numbers never reach TradeClear. When you come back, you are back on our one session cookie.

Our host

Cloudflare serves the pages and runs the application. Like any host it handles the network requests needed to deliver a page, which includes your IP address. In some situations Cloudflare may set a cookie of its own to keep a site up under attack. We have not turned on any feature that does this. If that ever changes, this page changes with it.

Turning it off

You can block cookies in any browser, under privacy settings. Blocking them will not break the public pages or the upload link. It will stop you signing in, because staying signed in is the whole job the cookie does.

Changes

If we ever add something that sets another cookie, we will describe it here before it goes live, and the date at the top will change. We will not add tracking quietly.

Getting in touch