1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and improve your experience. We also use similar technologies such as localStorage for client-side data storage.
2. How We Use Cookies
TapInFlow uses cookies and local storage for essential functionality and, with your consent, for analytics purposes. We do not use cookies for advertising or tracking across third-party websites.
3. Essential & Preference Storage
We do not use traditional browser cookies for our own functionality; instead we use your browser's localStorage. Strictly necessary items are required for the Service to work and cannot be disabled — no consent is required for these under GDPR. Functional / preference items are stored only when you actively make a choice (for example, switching language or joining a session), and never on a plain visit.
| Name (localStorage) | Purpose | Category | Retention |
|---|---|---|---|
| tif:token | Authentication session token | Strictly necessary | Until logout |
| tif:refresh | Authentication refresh token (renews your session) | Strictly necessary | Until logout |
| tif:cookie-consent | Your cookie/analytics choice and timestamp | Strictly necessary | Until you change it |
| tif:locale | Language preference — saved only when you switch language | Functional / preference | Until you change it |
| tif:participant:<code> | An anonymous participant ID for a session you join — saved only when you join. The nickname you type is sent to the session, not stored here. | Functional / preference | Persistent |
4. Site Analytics
We operate our own analytics on infrastructure we control, using the open-source Umami software. Umami is hosted atanalytics.tapinflow.com— the data never leaves our environment and is never shared with third parties.
We run Umami without setting cookies in your browser. It records page-level activity (URL visited, referrer, browser type, screen size, and approximate country derived from your IP address). To count unique visitors, Umami generates privacy-preserving session identifiers using a rotating salt; these identifiers are not intended to directly identify individual visitors.
How we apply this depends on where you are:
- EU / EEA / UK visitors — opt-in. Analytics is off by default: the Umami script is not loaded and no analytics request is sent until you choose “Accept All” in the consent banner. Choosing “Essential Only” leaves it off.
- Other regions — on by default (legitimate interest).Because Umami is cookie-free and does not retain personally identifying information, we enable this privacy-friendly measurement by default and do not show a consent banner — but you can opt out at any time (see below).
Either way, you can change or withdraw your choice at any time via the Cookie Settings link in the footer; when you opt out, analytics stops immediately and the page reloads to remove the script. We detect your region from your browser’s timezone (no IP is sent anywhere) and treat any European or undetectable timezone as opt-in, to err on the side of consent. We do not use Google Analytics, Facebook Pixel, advertising tags, or any other third-party tracking service.
5. Managing Your Preferences
You can manage your cookie preferences in the following ways:
- Cookie consent banner: When you first visit the Service, a banner lets you accept all, accept essential only, or customize your preferences. Your choice is stored with a version and timestamp.
- Cookie Settings (footer): The “Cookie Settings” link in the site footer reopens this panel at any time so you can change or withdraw your analytics choice. When you withdraw, analytics stops immediately and the page reloads to remove the analytics script.
- Browser settings: Most browsers allow you to block or delete cookies and local storage. Note that blocking essential storage may prevent the Service from functioning properly.
You do not need to clear your browser storage to withdraw consent — use the Cookie Settings link in the footer at any time.
6. Third-Party Cookies
When you use Google Sign-In, Google may set cookies according to their own Privacy Policy. These cookies are managed by Google and are not within our control.
We load Paddle's checkout SDK only when you actively start a purchase (for example, by clicking a buy or subscribe button) — not when you simply open the pricing page. When you do, Paddle may set cookies and load additional components it uses to run and secure the payment, according to Paddle's own Privacy Policy. Paddle acts as our Merchant of Record for the transaction; these are not loaded for our own site analytics.
7. Changes to This Policy
We may update this Cookie Policy from time to time. Material changes will be posted on this page with a revised date. If we introduce new categories of cookies, we will request your consent before setting them.
8. Contact
If you have questions about our use of cookies, contact us at hello@tapinflow.com.
For more information about how we handle your personal data, see our Privacy Policy.