Cookies and local storage

What we store on your device

In your browser's storage, not as cookies:

• The session token that keeps you logged in (local storage). Without it the app cannot function. It is deleted when you log out.
• Your answer to the cookie question and when you gave it (local storage), so we do not ask on every page. We ask again after six months.
• Only if you accepted analytics: a random visit identifier (session storage) that groups your clicks on our public pages into one visit. It is deleted when you close the tab.

Google Analytics, only if you accept

On our public pages — the landing page, pricing and checkout, the sample report, the help center, event pages and these legal pages — we use Google Analytics to count visits and see which pages are useful. It never runs inside the app, on shared report links, or on invitation and password links. Nothing is loaded from Google until you choose Accept. Once you do:

• Google Analytics sets two cookies on tonton.teonto.com, _ga and _ga_CH4LSQ6WRX, which hold a random visitor identifier and the state of your visit. They expire after 13 months.
• Google receives the address of each page you view without its query string (campaign tags such as utm_source excepted), the page title, the domain of the site that sent you, and your browser, device type and approximate location. Google states that Google Analytics does not log or store IP addresses.
• Google signals and ad personalisation are switched off, so the data is not linked to a Google account or used for advertising.
• Google processes the data for us under its data processing terms. It may be processed in the United States; Google LLC is certified under the EU–US Data Privacy Framework.
• Visit-level detail is kept for 2 months; after that only aggregate counts remain.

Changing your mind

Use Cookie settings at the foot of any public page to change your answer at any time. If you withdraw, Google Analytics stops at once and we delete its cookies from this site. Rejecting changes nothing else: every page works the same either way.

What we do not use

None of the following appear anywhere on this site:

• Any other third-party analytics — no Plausible, PostHog or equivalent.
• Advertising or conversion pixels of any kind.
• Session-replay tooling.
• Cross-site tracking, fingerprinting, or advertising profiles.

Counting clicks on our own pages

On our public pages we also count clicks on the main buttons using our own server — which page, which placement. Unless you accepted analytics, nothing is stored on your device for this, and the count is never tied to a person.

IP address and browser

When you submit a form on our marketing site, our server records your IP address and browser user-agent to prevent spam and abuse and to apply rate limits. The basis is our legitimate interest in keeping an invite-gated service from being abused. We keep those for 90 days and never use them to build an advertising profile.

When we ask for consent

Everything on this page except Google Analytics and the visit identifier that comes with it is strictly necessary to provide the service you asked for, so it needs no consent. Those two are not, so they wait for your answer in the cookie banner, where Accept and Reject are equal choices. If we ever add another tag, we will ask first.