Cookie Policy

Last updated: 2026-07-10

Draft. This document was prepared without a lawyer and is not legal advice; bracketed placeholders will be completed before production.

This Policy explains what cookies and similar technologies tikaboo.app uses, why, and how to control them. It supplements the Privacy Policy. Optional categories load only after you consent (see the banner and "Privacy settings").

1. What cookies are

A cookie is a small file a website stores in your browser. We also use similar technologies (localStorage, device identifiers). Below we refer to them collectively as "cookies".

2. Strictly necessary (always on)

Required for the site to work; sign-in and security are impossible without them. No consent needed.

  • access_token — sign-in session (httpOnly), lifetime ~15 minutes;
  • refresh_token — session renewal (httpOnly), lifetime ~29 days;
  • locale — chosen language, lifetime ~1 year;
  • tikaboo_consent — your stored consent choice, lifetime ~1 year;
  • technical anti-fraud and load-balancing cookies.

3. Analytics (with consent)

Collected only after you consent, to understand how the service is used: PostHog (usage events, including server-side generation and publish events; may use identifiers). PostHog also builds heatmaps — aggregated clicks, mouse movement, and scrolling, with no capture of field contents. Cloudflare Web Analytics is not currently used.

4. Session replay (with consent)

A separate category: on-screen activity recording (PostHog session replay). Runs only after you consent; all input fields are masked, and sensitive areas (chat, code, billing details) are excluded from recording entirely.

5. Third-party services

Error monitoring (Sentry) is treated as strictly necessary (security and stability) and is disclosed in the Privacy Policy. A device fingerprint is used narrowly on the sign-in / sign-up screens for fraud prevention.

6. How to control cookies

  • change or withdraw consent — the "Privacy settings" link in the site footer;
  • your browser settings let you block or delete cookies (this may limit the site);
  • optional tracking is never enabled without your explicit consent — regardless of browser signals.

7. Changes and contact

We may update this Policy; the date is shown at the top. Questions: info@tikaboo.app. For more on data processing, see the Privacy Policy.