Last updated: 3 October 2026
Short version: we use essential cookies to keep you signed in and to keep the site safe from automated traffic. We use Google Analytics to understand how the site is being used, including what people buy, but only after you consent via our cookie banner. We ask everyone, wherever you are. No advertising cookies, no tracking for marketing purposes.
This Cookie Policy explains how 18December uses cookies and similar tracking technologies on this Platform. It should be read alongside our Privacy Policy.
Cookies are small text files placed on your device when you visit a website. They help websites function, remember your preferences, and provide information to site operators about how their site is used. Similar technologies include local storage and session storage.
These cookies are necessary for the Platform to function. Without them, you cannot sign in or use core features. Essential cookies cannot be disabled.
18d_active_account): set by us if you belong to someone else’s circle, to remember whose account you are currently looking at. It holds an account identifier, not a name or email address.nominee_ and executor_, followed by a reference number): set by us when someone who has been given access to a member’s documents enters the code we emailed them. It lets that device back in without a new code. It holds a random session code, not a name or email address. There is one for each member or estate the access is for, and each lasts up to 30 days. It stops working as soon as the access ends.__cf_bm and _cfuvid): our sign-in provider, Clerk, runs behind Cloudflare. Cloudflare sets these on Clerk’s address on our domain (clerk.18december.com.au) to tell people apart from automated traffic. __cf_bm lasts 30 minutes and _cfuvid is removed when you close your browser. Neither holds your name or email address.We also use your browser's local storage and session storage, which are not cookies. Session storage is cleared when you close the tab.
To make features work. In local storage we save your pathway selection (whether you have told us you are the person with the diagnosis, someone supporting them, or someone whose person has died), your checklist state, which guides you have read or saved, your answer to the cookie question, and that you have seen a one-time notice so it is not shown again. If you are not signed in, this stays on your device and is not sent to us, apart from the count of cookie answers described in section 4, which carries no identifier. If you have accepted analytics, ticking or unticking an item on the public checklist also tells Google which item it was. If you are signed in, your pathway, checklist and guides are also saved to your account so they are available across your devices. In session storage we briefly hold three things: an email address given before you sign up (one you typed, or the address a gift was sent to), so the sign-up form can be filled in for you; where you started signing up from; and a one-time note shown after you switch roles.
To count things accurately. Some of these entries exist only so that our counts are right, not to make a feature work. They record, in local storage, that you have already been counted as seeing the cookie banner and that a sign-up has already been counted, and, in session storage, that a page event has already been sent to Google Analytics this session, so nothing is counted twice. Our own team’s browsers also carry a local storage marker so our visits are left out of the analytics. None of these entries holds your name or email address.
We use Google Analytics 4 to understand how visitors use the Platform. That includes, for example, pages visited, session duration, approximate geographic region, device type, and browser. It also includes what you buy: when you start a checkout or complete a purchase, we send Google an event recording which plan it was and its standard price in Australian dollars (not the amount you actually paid, which can be less if you used a code), and if you leave a checkout without paying, or the checkout could not be started, we send an event recording which plan you were looking at, without an amount. We do not send your name, your email address, or any card or billing detail. We use this data only to improve the Platform. Google Analytics sets a cookie holding a random identifier for your browser, so it can tell a return visit from a first one. That identifier is not your name or email address, and we never connect it to your account, but it is not anonymous: it lets Google recognise the same browser from one visit to the next. Analytics cookies are non-essential and are only placed after you give your consent via our cookie banner, wherever in the world you are.
You may withdraw consent at any time by clicking the cookie preferences link in the footer. You can also opt out by installing the Google Analytics Opt-out Browser Add-on. Google Analytics data is processed by Google in the United States under Standard Contractual Clauses.
We do not use marketing or advertising cookies. We do not serve targeted advertising on this Platform.
Some cookies on this Platform are set by third-party services we use:
These providers set and read cookies in accordance with their own privacy policies. We do not control third-party cookies.
When you first visit the Platform, a cookie consent banner allows you to accept or decline non-essential cookies. You can update your preferences at any time by clicking the cookie preferences link in the site footer.
We keep a daily count of how many people were shown that banner and how many accepted or declined, so we know whether the question is being answered. It is a count and nothing else. There is no identifier, no session, no page, no address and no time of day, so no row can be traced back to you or to your answer, whichever answer you gave. We record it whether you accept or decline, because a count of answers tells us nothing about the people who gave them.
You can also manage or delete cookies through your browser settings at any time. Most browsers allow you to view, delete, or block cookies from specific sites or entirely.
Please note that disabling essential cookies (including Clerk session cookies) will prevent you from signing in to the Platform. Disabling analytics cookies will not affect your ability to use any Platform features.
Browser-specific instructions:
We do not currently respond to browser-level “Do Not Track” signals, as there is no industry-wide standard for these signals.
We do honour Global Privacy Control (GPC) browser signals. If your browser sends one, we treat it as a decline: analytics stay off, we do not ask you the cookie question, and we do not count you as having been asked. If you would rather turn analytics on, you still can, through the cookie preferences link in the footer. An answer you give here is more specific than a browser-wide setting, so if you have already accepted on this site we keep to that rather than overriding it.
We may update this Cookie Policy from time to time. Material changes will be communicated via the Privacy Policy update process. The date at the top of this page indicates when it was last updated.
For questions about our use of cookies, contact us at hello@18december.com.au.
18December does not sell, rent, or share your personal information with third parties for advertising or marketing purposes. We do not engage in cross-context behavioural advertising. The data we share with service providers (listed in our Privacy Policy) is solely to operate the platform, not for commercial data transactions.
If you are a California resident and wish to exercise your rights under the California Consumer Privacy Act (CCPA/CPRA), contact us at hello@18december.com.au.