Tepuy Solutions (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal information in accordance with the Australian Privacy Act 1988.
What we collect
- Your email address (if you sign up for updates, submit a form, or make a purchase)
- Anonymous usage data (e.g., through cookies and analytics tools) — see “Cookies and local storage” below for the specific cookies and browser-storage keys involved, what each is for, and how to remove them
- Account and identity data via our authentication provider, Auth0, when you create an account (e.g., name, email address, login metadata)
- For professional (adviser) tenant accounts: firm, client, and scenario data you or your firm store within the platform to run and save simulations
Cookies and local storage
This section lists everything this site stores in your browser, who sets it, how long it lasts and how to remove it. It is derived from the site’s own source code, not from a generic template.
Cookies
No script written by us sets a cookie. The only cookies below come from
Google Analytics and from our authentication provider, Auth0. All four are
first-party cookies on tepuysolutions.com.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes one browser from another so repeat visits can be counted once. | 2 years |
_ga_JSRX3R52HW | Google Analytics 4 | Keeps the state of the current visit for this specific analytics property. | 2 years |
auth0.<client id>.is.authenticated | Auth0 | Records that you have an active sign-in, so the app can skip a needless login check. | 1 day |
_legacy_auth0.<client id>.is.authenticated | Auth0 | A duplicate of the cookie above written without the modern SameSite attribute, for older browsers that reject it. |
1 day |
The two Google Analytics cookies are set by default, and you can turn
them off. The site loads Google Analytics with Google’s Consent Mode.
analytics_storage is set to granted by default, so
_ga and _ga_JSRX3R52HW are written on your first visit
and your visits are counted. We are telling you this rather than asking you
first, which is what Australian law requires of us — see
“Your analytics choice” below, which explains why
and gives you a switch that turns it off immediately and stays off.
The three advertising settings — ad_storage,
ad_user_data and ad_personalization — are set to
denied and nothing on this site ever grants them. We do not run
advertising, remarketing or Google Signals here at all.
Local storage — set by us
These are stored by the site’s own scripts. They stay in your browser and are never transmitted to us or to anyone else. All of them are functional: they remember a preference or an acknowledgement so you are not asked again.
| Key | Where | What it holds |
|---|---|---|
tepuyConsent | Calculators | The version of the Terms of Use and Privacy Policy you accepted, and when. Lets us avoid showing the acceptance screen again until those documents change. This is the Terms acceptance, and is not an analytics choice — that is the separate key below. |
tepuyAnalyticsConsent | Every page | Your analytics switch — the single word granted or denied. Written only if you use the controls in “Your analytics choice” below, and read on every later page load so your choice sticks. If it is absent you have not changed anything, and analytics is on. |
pvs_mode | Property vs Shares | Whether you last used the Basic or Advanced input panel. |
db-theme | Dashboard | Your light/dark theme choice. |
tepuy_adv_… | Dashboard (adviser workspace) | Layout and display preferences for the adviser tools, one key per preference. |
likes-…, comments-… | Blog post template | An article “like” count, and any comment text and display name typed into an article’s comment box. These never leave your browser — nothing is sent to us, nothing is published, and nobody else can see them. Note that a comment box is present only on our unpublished article template, so no article currently on this site writes either key. |
tepuySidebarCollapsed | No longer used | Whether an app sidebar was collapsed. Nothing on this site writes or reads it any more — the script that once did was removed in September 2026. It is listed here only because a browser that visited before then may still be holding the value, and you may want to know what it was for when you find it. |
Three further keys — tepuy_pro, proUnlocked and
plannerPro — are read by one page to decide whether to show
a “Pro active” badge, but nothing on this site writes them. They are left over
from an earlier design. Your actual plan is never determined from your browser:
it comes from your Auth0 account record, and paid features are checked on our
servers.
Local storage — set by Auth0 when you sign in
We configure the Auth0 browser SDK to keep your session in local storage rather
than in memory, so that reloading a page does not sign you out. Signing in
therefore writes two entries whose names begin with
@@auth0spajs@@: one holding your ID, access and refresh tokens, and
one holding the profile fields from your ID token (such as your name, email
address and picture URL). Signing out removes them. While you are signed in,
these tokens are what let the site prove who you are — treat them like a
password and do not sign in on a device you do not trust.
Session storage (cleared when you close the tab)
| Key | Set by | What it holds |
|---|---|---|
tepuy_rtab | Retirement calculator | Which results tab you were last looking at. |
pvs_disclaimer_dismissed | Property vs Shares | That you dismissed the on-page disclaimer. |
tepuyAuthIntent, tepuyAuthPending | Analytics | A flag recording that you were sent to the sign-in page and whether you went there to create an account, so the visit can be counted as a sign-up rather than a sign-in once you return. Holds no identifier and is deleted as soon as it is used. |
tepuySignInGateIntent | Calculators | That you pressed a calculator’s PDF export button while signed out, so that after you sign in you land back on that export instead of at the top of the page. Holds the page path and which export you asked for — no identifier, nothing about your figures — and is deleted the moment it is used. |
a0.spajs.txs.… | Auth0 | The in-progress sign-in request, for the few seconds between leaving for the login page and coming back. Deleted on return. |
Stripe
Stripe sets nothing in your browser on this site. There is no Stripe script on any page here. When you start a purchase you are redirected to Stripe’s own checkout page, where Stripe sets its own cookies on Stripe’s domain under Stripe’s privacy policy, and then returned here. We never see or store your card details.
Cloudflare
Our domain is served through Cloudflare’s network. Cloudflare does not run any script on these pages: there is no Cloudflare tag in our source. Cloudflare Web Analytics is not enabled for this site, and it would not change this list if it were — it is a privacy-preserving, cookieless product that stores nothing in your browser at all. Cloudflare’s network layer may set its own security cookies (for example a bot-management cookie) independently of anything on our pages; these are described in Cloudflare’s own documentation.
Other third-party requests
Some pages load fonts from Google Fonts and JavaScript libraries from public CDNs (jsDelivr, cdnjs and unpkg), and the Auth0 SDK from Auth0’s CDN. These are static file downloads: they set no cookies and store nothing in your browser, though the provider necessarily sees the request, including your IP address.
How to stop or remove any of this
- Clear it. Every browser can delete cookies and site data for a single site. In Chrome, Edge, Firefox and Safari this is under the padlock or site-information icon in the address bar, or in the browser’s privacy settings. Doing so removes everything listed above. It will also sign you out and reset your preferences — nothing else is lost, because your saved scenarios live in your account, not in your browser.
- Block it. Blocking cookies and site data for this domain in your browser settings prevents all of it. The calculators still work; you will be asked to accept the terms on each visit, preferences will not persist, and you will not be able to stay signed in.
- Opt out of Google Analytics specifically. Google publishes a browser add-on that blocks Google Analytics on every site you visit, at tools.google.com/dlpage/gaoptout. Most content blockers and browser tracking protection block it as well.
- Sign out. Signing out removes the Auth0 tokens and cookies described above.
Your analytics choice
Australia has no cookie-consent law. There is no Australian equivalent of the European rule that requires a click-through banner before storing anything in your browser. What the Privacy Act 1988 does require of us is different: Australian Privacy Principle 5 requires that you be told, at or before the time of collection, what is being collected and why, and Australian Privacy Principle 3 limits what we may collect to what we reasonably need. This section, together with the rest of this policy, is that notice.
Analytics is on by default, and there is no banner asking you first. We would rather say that plainly than bury it. Australian law does not require us to ask, and we have taken the view that a click-through nobody reads is worse than a clear statement and a switch that actually works. What we measure is which pages and calculators get used and how often — not who you are. We do not run advertising, remarketing or Google Signals, and we never sell this data.
You can turn it off right here, for this browser, permanently. It takes effect
the moment you click and it is remembered under
tepuyAnalyticsConsent, so it holds on every later page and every
later visit — not just this page. Turning it off costs you nothing: every
calculator, article and account feature behaves identically either way.
Analytics is currently ON for this browser.
Turning analytics off stops any further data being sent and stops the two Google cookies being read or written. It does not delete cookies already set — to remove those, clear site data as described above. If your browser blocks us from storing the choice, the line above will say so rather than claim a setting that will not survive a reload.
This site serves an Australian audience and is written to Australian law. We do not claim that it is designed for compliance with the EU General Data Protection Regulation or the UK equivalent, and visitors from those jurisdictions should read this policy on that basis.
How we use it
- To operate and improve our calculators and services
- To communicate with you (e.g., updates, offers, or support, if you’ve opted in)
- To better understand how people use our website
No sale or sharing
We do not sell or share your personal information with third parties, except as required to operate our services (e.g., Stripe for payments, Google Analytics, or Google Forms for contact submissions).
Marketing and communication
We will only send you promotional or update emails if you have explicitly opted in. You may unsubscribe at any time via the link in the email or by contacting us directly.
Third-party tools
We may use trusted tools such as Google Analytics, Stripe, Auth0, and Google Forms. These third parties may collect data according to their own privacy policies, which we recommend reviewing. We only allow access to the minimal data necessary for service delivery.
Where your data is processed
Our site and services are hosted using Netlify, Cloudflare, and Render. These providers operate global infrastructure, so your data may be processed on servers located outside Australia, including in the United States or other jurisdictions where our hosting and processing partners operate. While we primarily serve users in Australia, international users should note that their data may be processed outside Australia as a result.
Data retention
We retain your account and scenario data for as long as your account remains active, and for 12 months after closure. Analytics data collected via Google Analytics is retained according to Google’s own retention settings (currently 14 months) rather than a Tepuy-specific period. Billing records are retained for 5 years in line with Australian tax recordkeeping requirements under the Income Tax Assessment Act. You may request earlier deletion of your data at any time — see “Access and deletion requests” below.
Data security
We take reasonable steps to protect your information using modern security practices. However, no system is 100% secure, and you should be aware that any data shared over the internet carries some risk.
Data Privacy and Principles
Tepuy Solutions does not:
- Sell your data — and we ensure any partners we work with don’t either
- Require your full name, government ID, or bank account numbers
- Store your credit card information — payments are securely processed by Stripe
Access and deletion requests
You may request access to your personal data or request its deletion by emailing us at [email protected]. We will respond within 30 days and confirm what data we hold, if any, and fulfill your request wherever possible.
International users
While we primarily serve users in Australia, international visitors should note that their data may be processed in accordance with Australian privacy laws and, as noted above, on infrastructure located outside Australia.
Policy updates
This policy may be updated from time to time. Any significant changes will be reflected on this page. We recommend checking back periodically to stay informed.