Cookie Policy
This Cookie Policy explains what cookies and similar technologies Truyou uses, why we use them, and the choices you have. It supplements our Privacy Policy.
1. What is a cookie?
A cookie is a small text file that a website stores on your device. It can hold information such as your sign-in state or a preference. Some are deleted when you close your browser ("session cookies"); others remain for a set period ("persistent cookies"). We also use similar technologies such as local storage; for brevity, we refer to all of them as "cookies".
2. Categories of cookies we use
2.1 Strictly necessary (always on)
These are required for the Service to work. Without them, sign-in, security, and core features wouldn't function. They do not require your consent under UK or EU law.
| Cookie | Purpose | Duration |
|---|---|---|
| Firebase Authentication tokens | Keep you signed in | Session / up to 1 hour for ID token; 30 days refresh token |
sidebar_state | Remember whether the navigation sidebar is open or collapsed | 7 days |
truyou_consent | Record your cookie consent choice so we don't ask again | 12 months |
2.2 Analytics (consent required)
We use privacy-respecting product analytics to understand which features people use and find errors. These cookies only run if you accept them.
| Cookie / tool | Purpose | Duration |
|---|---|---|
| PostHog (or equivalent) | Aggregate usage statistics, feature adoption, conversion funnels | Up to 12 months |
| Sentry (or equivalent) | Capture client-side errors so we can fix them. IP addresses are truncated. | Session |
2.3 Marketing
We do not currently use marketing or advertising cookies, and we do not sell or share personal data for cross-context behavioural advertising.
3. Your choices
- You'll see a consent banner the first time you visit. Accept all, reject non-essential, or customise.
- Change your choice at any time from the "Cookie settings" link in the footer.
- You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, parts of the Service will not work.
4. Do Not Track
Some browsers send a "Do Not Track" signal. There is no industry standard for honouring it. We treat a configured Global Privacy Control (GPC) signal as a request to opt out of analytics cookies.
5. Changes
If we add or remove cookies, we'll update this page and re-prompt you for consent if the change is material.
6. Contact
Questions: [email protected].