Last updated 15 October 2026
Cookie policy
This page explains the small amount of information this website stores on your device, and why. Our own site analytics use no cookies and never follow you around the web. Anywhere outside the United States, including the UK and the EU, we use no advertising or tracking cookies at all. For visitors in the United States, we may use Meta's pixel to see which of our ads work and to show our ads again to people who've visited, OpenAI's pixel to see which of our ads in ChatGPT work, and Google's tag to see which of our ads in Google search work: see "Measuring our ads" below.
What we store
| Name | Type | What it does | How long |
|---|---|---|---|
| tps_s | Essential cookie | Links your free scan to the name, email and business you entered, so your report reaches the right person | 24 hours |
| tps_o | Essential cookie | Protects the sign-in step when you connect QuickBooks Online, so nobody else can hijack it | 10 minutes |
| tps_r | Essential cookie | Lets this browser reopen your report, show your scan's plan on our pricing page, and link a checkout you open to your scan. Holds no figures | 12 months |
| tps_d | Essential cookie | Who opened the live dashboard demo, so its follow-up emails and checkout know you. Sealed, so only our server can read it | 90 days |
| tps_e | Essential cookie | Set when you open a link in one of our emails: who that email was for, so our checkout and follow-up emails know you in this browser too (for example, the email opened on a different device from the one you signed up on). Sealed, so only our server can read it | 90 days |
| tps_rec | Your choice (ours) | United States visitors only, where we ask first: your answer when we ask whether we may record your visit (yes or no), so we never ask twice | 12 months |
| tps_rn | Recording setting (ours) | United States visitors only: tells this site your state is one where we record a visit without asking first (see Recordings in our privacy policy). It holds a 1, nothing about you | 24 hours |
| _clck | Analytics cookie (Microsoft Clarity) | Only while we record your visit: a random number that keeps your visits to our pages together | 12 months |
| _clsk | Analytics cookie (Microsoft Clarity) | Only while we record your visit: joins the pages of one visit into one recording | 1 day |
| CLID, MUID, ANONCHK, SM, MR | Analytics cookies (Microsoft, on clarity.ms and bing.com) | Only while we record your visit: Microsoft's own cookies for Clarity, set on its own sites | Up to 12 months |
| tps_geo | Functional cookie | The two-letter code of the country you're browsing from, so prices open in your currency | 24 hours |
| tps_demo | Functional cookie | Remembers that you've opened the live dashboard demo, so it opens straight away next time | 90 days |
| tps_mp | Advertising setting (ours) | United States visitors only: tells this site it may load Meta's pixel for you. It holds our pixel's ID, nothing about you | 24 hours |
| _fbp | Advertising cookie (Meta) | United States visitors only: a random number, set for Meta's pixel, that lets Meta link your visits here to our ads | 90 days |
| _fbc | Advertising cookie (Meta) | United States visitors only, and only if you came from Facebook or Instagram (for example one of our ads): remembers that click | 90 days |
| tps_op | Advertising setting (ours) | United States visitors only: tells this site it may load OpenAI's pixel for you. It holds our pixel's ID, nothing about you | 24 hours |
| __oppref | Advertising cookie (OpenAI) | United States visitors only, and only if you came from one of our ads in ChatGPT: set on our site by OpenAI's pixel to remember that click (OpenAI's own reference for it) | 30 days |
| __obref | Advertising cookie (OpenAI) | United States visitors only: a random browser reference, set on our site by OpenAI's pixel, that lets OpenAI link your visits here to our ads in ChatGPT | 365 days |
| tps_gg | Advertising setting (ours) | United States visitors only: tells this site it may load Google's tag for you. It holds our Google Ads tag's ID and the label of the conversion it counts, nothing about you | 24 hours |
| _gcl_au | Advertising cookie (Google) | United States visitors only: a random reference, set on our site by Google's tag, that lets Google link your visits here to our ads in Google search | 90 days |
| _gcl_aw, _gcl_gb | Advertising cookie (Google) | United States visitors only, and only if you came from one of our ads in Google search: set on our site by Google's tag to remember that click (Google's own reference for it). Google's tag may also set _gcl_dc, _gcl_gs or _gcl_ag for the same job | 90 days |
| tps_src | Ad measurement cookie (ours) | United States visitors only, and only if you arrive from a link with campaign tags (for example one of our ads): remembers those tags, and the ad's click reference if it has one, so a scan you start or a package you buy after looking around still counts towards the ad that brought you. Nothing else from the page's address | 30 days |
| tps_noads | Your choice (ours) | Only if you turn ad tracking off (Meta's, OpenAI's and Google's) with the switch in our privacy policy: remembers that you did | 12 months |
| tps_internal | Your choice (ours) | Only on our own team's browsers (a link with ?internal=1): keeps them out of our numbers and out of every ad platform | 12 months |
| tps_cur | Local storage | Remembers the currency you picked, only if you pick one | Until you clear your browser data |
| tps_report | Session storage | Keeps your report in the browser tab you ran it in. Our pricing and welcome pages read it in that tab, to show your plan and your first move | Until you close the tab |
| tps_pick | Session storage | Remembers the money move you picked to start with, so your plan and checkout can show it | Until you close the tab |
| tps_booked | Session and local storage | Remembers that you've booked a call, so your report stops asking you to book one | Until you close the tab, or clear your browser data |
| tps_pop | Local storage | Remembers that you closed a pop-up on your report, so it doesn't open by itself again. Holds only when your scan ran | Until you clear your browser data |
| tps_played, tps_plan_click, tps_pop_auto, tps_checkout, tps_entry, tps_modal_seen | Session storage | Remember, in this tab only, whether you've tried your numbers, opened a pop-up, clicked through to a plan or started checkout, and how you came to our pricing page, so at most one pop-up opens by itself. Hold no figures | Until you close the tab |
| tps_next | Local storage | Remembers that this browser ran a scan and which plan it pointed to, so our pages can show your plan as your next step, and stop once you've started. Holds the plan's name, when your scan ran and when you last visited. Never a figure or a name | A year from your scan, or until you clear your browser data |
| tps_r6pop, tps_nx_pop, tps_nx_bar | Session storage | Remember, in this tab only, that your plan has already popped up or that you've hidden the plan bar, so neither comes back this visit | Until you close the tab |
| tps_demo_pop, tps_demo_sell, tps_demo_go | Session storage | Remember, in this tab only, that a pop-up about the live dashboard demo has already opened, or that you've gone on to our pricing page, so at most one opens by itself. Nothing about you | Until you close the tab |
| tps_mine | Session storage | Remembers, in this tab only, your two answers in the live dashboard demo's offer (roughly what you sell a year, and how long your clients take to pay), so our pricing page can show your rough numbers beside the price. Never sent to us | Until you close the tab |
| tps_v | Session storage | United States visitors only: a random number for this visit, so our visit measurement can tell one page of your visit from the next. Nothing about you | Until you close the tab |
Apart from the advertising ones (Meta's two, OpenAI's two, Google's, the settings that switch the pixels and Google's tag on, and tps_src, our record of the ad that brought you) and tps_v, our visit measurement's number (also United States visitors only), these are strictly necessary for the site to do what you asked, or only remember a choice you made, so the law doesn't require us to ask for consent first. The advertising ones are never set outside the United States, so never in the UK or the EU. That's why there's no cookie banner.
Other services the site uses
- Google Fonts: our fonts load from Google, which receives your IP address to deliver them.
- Booking a call: our booking page, profitsyst.com/book, shows Google Calendar's booking calendar inside the page, and the scan report may show a Calendly booking window. Those services set their own cookies under their own policies.
- Intuit: when you connect your books you sign in on its site, under its cookie policy.
- Hosting: our host, Vercel, keeps basic technical logs to keep the site running and secure.
- Spam protection: the scan form may use Cloudflare Turnstile to check a person is filling it in. It runs under Cloudflare's privacy policy and does not track you across sites.
Measuring our ads (Meta)
For visitors in the United States, we may use Meta's pixel and its Conversions API. They tell Meta when someone who saw one of our Facebook or Instagram ads visits a page, starts or finishes the free scan, books a call or buys a package. That shows us which ads work, so we stop paying for the ones that don't, and it lets us show our ads again to people who've visited.
Meta gets the page, your browser and IP address, the ad you clicked if you came from one, and, once you've given us your email, a scrambled copy of it (a hash), which Meta can only use to match an account it already knows. Never your books, your password or any figure from your report. When the pixel calls Meta, Meta may also read its own facebook.com cookies (such as fr) if you use Facebook or Instagram in the same browser. More in our privacy policy.
To opt out, use the switch in our privacy policy, or turn on Global Privacy Control in your browser (Brave and DuckDuckGo have it on already), and neither runs for you. You can also block or clear cookies, or change which ads you see in your Facebook or Instagram ad preferences.
Measuring our ads in ChatGPT (OpenAI)
For visitors in the United States, we may use OpenAI's pixel and its Conversions API. They tell OpenAI when you visit a page, start the free scan, book a call, open checkout or buy a package, so OpenAI can tell us which of those came from our ads in ChatGPT. That shows us which of those ads work, so we stop paying for the ones that don't.
OpenAI gets the page, your browser and IP address, its own reference for the ad you clicked if you came from one, the browser reference its pixel keeps, and, once you've given us your email, a scrambled copy of it (a hash). We never send OpenAI your name, phone number or address, and it never gets your books, your password or any figure from your report. OpenAI's pixel may itself spot contact details you type into a form on our pages and send OpenAI only a hash of them (OpenAI calls this automatic advanced matching). It never loads on the pages where you connect your books, see your report or are told your books are disconnected, or on the page you land on after paying. More in our privacy policy.
To opt out, use the same switch in our privacy policy, or turn on Global Privacy Control in your browser, and neither runs for you. You can also block or clear cookies.
Measuring our ads in Google search (Google)
For visitors in the United States, we may use Google's tag (Google Ads). It tells Google when you visit a page, and when you start or send our scan form and whether it's a business we work with, so Google can tell us which of those came from our ads in Google search. That shows us which of those ads work, so we stop paying for the ones that don't. We don't use it to show you our ads again elsewhere.
Google gets the page, your browser and IP address, its own reference for the ad you clicked if you came from one, and, once you've given us your email address and phone number, a scrambled copy of each (a hash), which Google can only use to match an account it already knows. It never gets your email address or phone number themselves, your books, your password or any figure from your report. When its tag calls Google, Google may also read its own google.com and doubleclick.net cookies if you use Google in the same browser. It never loads on the pages where you connect your books, see your report or are told your books are disconnected, or on the page you land on after paying. More in our privacy policy.
To opt out, use the same switch in our privacy policy, or turn on Global Privacy Control in your browser, and it doesn't run for you. You can also block or clear cookies, or change which ads you see in Google's My Ad Center.
Visit counts: we count visits to each page with Vercel Web Analytics, so we know which pages help. It sets no cookies, stores nothing on your device, never records who you are, and can't follow you to other sites.
Controlling cookies
You can block or delete cookies in your browser settings. If you block the essential ones, the free scan won't work.