Cookie Policy · taproute

The short version

We set seven cookies, all first-party: five to run taproute, and two that live for half an hour so a sign-up starts on the right screen. There are no advertising cookies and no third-party cookies, nothing that follows you between sites, and nothing that profiles you. Scanning one of our QR codes sets no cookie at all.

Because every cookie we use is strictly necessary (the exempt category under the EU ePrivacy rules), there is nothing to consent to, so you will not find an "accept / reject" wall here. We show a one-time notice so you know where to read this, and that is the extent of it.

The cookies we set

Cookie	What it is for	Lifetime
Sign-in session	Keeps you signed in to your account. Without it you could not use the app.	Session
tr-ws	Remembers which workspace you were last looking at.	1 year
tr-theme	Remembers whether you chose the light or dark theme.	1 year
tr-locale	Remembers your language choice.	1 year
tr-cookie-ack	Remembers that you have seen the cookie notice, so we do not show it again.	1 year
tr-from	Remembers which page you clicked "sign up" from, so the app can show you the right first screen. Set only when you follow a sign-up link, read once when you create an account, then deleted.	30 minutes
tr-utm	Remembers which link brought you here (a newsletter, a forum post), so we know which of our own posts are worth writing. Same 30 minutes, same one-time read, and it holds a channel name we recognise, never an identifier for you.	30 minutes

All seven are first-party (set by taproute, not a third party) and sent with the SameSite=Lax attribute. The last two expire in half an hour and exist so that signing up lands you in the right place · they hold a page name and a channel name, never an identifier for you, and they are deleted the moment they are read.

What we do not use

No analytics cookies. We measure scans as country and device type on our own edge, without a cookie or an identifier for the person scanning. We count visits to our own marketing pages the same way · on our servers, as a page, a country and a referring site, with no cookie, no script in your browser and nothing that could be traced back to you.
No advertising cookies. We run no advertising and set nothing to profile you.
No third-party cookies. No other company sets a cookie through taproute.
No cross-site tracking. We do not follow you around the web or buy data about you.

Managing cookies

You can delete or block cookies in your browser settings at any time. Because ours are strictly necessary, blocking them has a cost: without the session cookie you cannot stay signed in, and without the preference cookies the app will forget your workspace, theme and language between visits.

You do not need to do anything to "turn off" tracking cookies, because we do not set any.

Changes to this policy

If we ever introduce a cookie that is not strictly necessary (for example an analytics cookie) we will add a genuine consent choice before it is set, and update this page and our Privacy Policy to say so. The date at the top always tells you when this last changed.