Cookie Policy

1. What are cookies?#

Cookies are small text files placed on your device when you visit our website. They help us ensure the site functions properly, provide a secure experience, and understand how our services are used. We may also use similar technologies, such as local storage and session storage, for the same purposes.

2. How we use cookies#

We use cookies and similar technologies for the following purposes:

Essential Cookies#

These are strictly necessary to provide you with the Taufolio service. They are used for:

• Authentication: Remembering your login state so you don't have to log in repeatedly.
• Security: Protecting your account, preventing fraudulent activity, and securing our API endpoints.
• Core Functionality: Storing your session preferences and ensuring the core features of the platform work correctly.

Because these cookies are essential for the operation of the service, they cannot be disabled.

Consent cookie#

We store your cookie consent choice locally so we do not re-prompt you on every visit. This is set when you accept or reject categories in the cookie banner and is required for the consent mechanism to work.

• tau_cc — stores your selected cookie categories (always at least necessary, optionally analytics), set by the consent banner. First-party. Retention: up to 6 months from your last update, after which the banner reappears.

Analytics, heatmaps, and session replay (PostHog)#

With your consent (the Analytics category in the cookie banner), we load PostHog for product analytics, heatmaps, session replay (logged-in users only), frontend error tracking, and web-vitals monitoring. PostHog acts as a data processor on our behalf and processes data in the European Union region.

PostHog sets first-party cookies whose names begin with ph_, including:

• ph_<project-id>_posthog — the PostHog session and visitor object: a random visitor ID, the current session ID, and feature-flag state. Used for analytics, heatmaps, paths, and (for logged-in users) session replay. First-party. Retention: up to 12 months from the last activity.
• ph_<project-id>_window_id — short-lived session window identifier used to stitch events from the same browser window. First-party. Retention: session.
• ph_opt_in_out_capturing — the in-browser flag that records whether you have granted analytics consent for this device. First-party. Retention: up to 12 months from the last update.

PostHog cookies are used for:

• Analytics — usage events, pageviews, and paths.
• Heatmaps — aggregated click positions on a page.
• Session replay — reconstructed playback of your interactions, for logged-in users only, masked for sensitive input fields.
• Frontend error tracking — capturing JavaScript exceptions and stack traces so we can fix bugs.
• Web vitals — page-performance measurements.

No marketing or advertising cookies are set. PostHog cookies are loaded only after you grant analytics consent in the banner, and are removed or stop being set once you withdraw consent via "Manage cookies" in the footer.

3. Third-party cookies#

Some of our service providers may place their own cookies on your device to help us deliver the service. These include:

• Authentication Providers (e.g., Clerk): Used to manage login sessions securely.
• Payment Processors (e.g., Stripe): Used to handle billing and prevent fraud during checkout.
• Analytics, replay, and error tracking (PostHog): Used to understand product usage, replay logged-in sessions, capture JavaScript errors, and improve the user experience. Loaded only after analytics consent.

These providers act as data processors on our behalf and use cookies in accordance with their own privacy policies.

4. Managing your cookie preferences#

You can control and manage cookies in several ways:

• "Manage cookies" in the footer: Click the Manage cookies link in the site footer to reopen the consent banner at any time. You can toggle the Analytics category off to withdraw consent — PostHog stops loading and stops capturing further events from your browser. Essential cookies cannot be disabled because the service cannot run without them.
• Browser Settings: Most web browsers allow you to view, manage, delete, and block cookies for a website. You can find out more about how to do this in your browser's "Help" or "Preferences" menu. Note that blocking essential cookies may break core functionality of Taufolio.
• Opt-out Mechanisms: You can also use built-in browser features like "Do Not Track" or privacy-focused browser extensions. The in-product Manage cookies control is the most reliable way to withdraw consent on Taufolio.

5. Changes to this policy#

We may update this Cookie Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page.

6. Contact#

If you have any questions about our use of cookies, please contact us at support@taufolio.com.