This policy explains the cookies Casebound uses. Casebound is a professional practice-management tool, not a consumer or advertising-supported site — we use cookies only to make the platform work and to keep your account secure. We do not use advertising or cross-site tracking cookies, with one exception: the public pages of the practice that takes clients directly on our site, where they load only if the visitor accepts them (§4).
1. Strictly necessary cookies
These cookies are required for the platform to function and cannot be turned off:
- Authentication session cookies, set by our authentication provider (Supabase), which keep you signed in between requests.
nb_mfa— a signed cookie that records that your current session has passed our email-code sign-in verification, so you are not asked for a new code on every page.nb_device— set only if you choose "remember this device" during sign-in verification, so this browser is not asked for a new code on your next sign-in for up to 30 days.
2. Third-party cookies
If you choose to sign in with Google, Google will set its own cookies as part of that sign-in flow. Casebound does not control those cookies — see Google's own privacy policy for details.
On a firm's public enquiry form and booking page, Cloudflare Turnstile runs a check that tells people from automated spam. It works inside its own frame and may use its own cookies or similar browser storage for that check only. Casebound does not control them — see Cloudflare's privacy policy for details.
The Casebound browser extension. The optional Chrome extension sets no cookies. It keeps a connection token for your browser, and a description of the IRCC portal pages it can fill (no personal information), in the extension's own browser storage. Removing the extension deletes that storage, and disconnecting the browser from the extension or from Settings → Security ends the connection. See §6 of our Privacy Policy.
3. Analytics
We use Vercel Web Analytics to understand aggregate traffic to our public pages (for example, how many people visit a page). This analytics tool is cookieless — it does not set any cookie, does not use a persistent identifier, and cannot track you across different websites.
4. Ad measurement on /immigration
One licensed immigration practice offers its services directly to the public on our site, at /immigration (see §7 of our Privacy Policy). Only on those pages, and only when ad measurement is switched on:
- a banner asks whether you accept ad measurement, and nothing below loads until you answer;
cb_direct_consentremembers your answer for 180 days, so the banner is not shown on every page. “Cookie preferences” in those pages' footer lets you change it;- if you click “Accept”, the Meta pixel and Google's tag (Google Analytics and Google Ads) load and set their own cookies, such as
_fbp,_fbcand_ga, so Meta and Google can tell the practice which of its ads led to an enquiry or a paid consultation. The campaign your visit came from is also kept in your browser for 30 days; and - if you click “Decline”, none of these load and the pages work the same.
Meta and Google use their cookies under their own privacy policies. No other page of Casebound, and no other firm's enquiry form or booking page, loads these tags.
5. What we don't use
Apart from the opt-in ad measurement in §4, we do not use advertising cookies, third-party tracking cookies, or cross-site profiling cookies.
6. Managing cookies
Because the cookies in §1 are required for sign-in and security, blocking them will prevent you from using Casebound. You can still clear cookies at any time through your browser settings, which will simply sign you out and, if applicable, forget a remembered device. Blocking or clearing the cookies in §4 has no effect on how the pages work.
7. Changes to this policy
We may update this policy if the cookies we use change. Material changes will be communicated by email or an in-app notice before they take effect.
8. Contact
Questions about this policy can be sent to privacy@casebound.ca.