Cookie Policy · taproute

The short version

We set seven cookies, all first-party: five to run the service, and two that live for half an hour so a sign-up starts on the right screen. The same seven, under the same names, on taproute.io and on popin.page. There are no advertising cookies and no third-party cookies, nothing that follows you between sites, and nothing that profiles you. Scanning one of our QR codes sets no cookie at all, and opening a Popin page sets none either.

Because every cookie we use is strictly necessary (the exempt category under the EU ePrivacy rules), there is nothing to consent to, so you will not find an "accept / reject" wall here. We show a one-time notice so you know where to read this, and that is the extent of it.

The cookies we set

Cookie	What it is for	Lifetime
Sign-in session	Keeps you signed in to your account. Without it you could not use the app.	Session
tr-ws	Remembers which workspace you were last looking at.	1 year
tr-theme	Remembers whether you chose the light or dark theme.	1 year
tr-locale	Remembers your language choice.	1 year
tr-cookie-ack	Remembers that you have seen the cookie notice, so we do not show it again.	1 year
tr-from	Remembers which page you clicked "sign up" from, so the app can show you the right first screen. Set only when you follow a sign-up link, read once when you create an account, then deleted.	30 minutes
tr-utm	Remembers which link brought you here (a newsletter, a forum post), so we know which of our own posts are worth writing. Same 30 minutes, same one-time read, and it holds a channel name we recognise, never an identifier for you.	30 minutes

All seven are first-party, set by us on the site you are reading · taproute.io or popin.page · and never by a third party. They are sent with the SameSite=Lax attribute. The last two expire in half an hour and exist so that signing up lands you in the right place · they hold a page name and a channel name, never an identifier for you, and they are deleted the moment they are read.

Storage in your browser

Besides cookies, the service keeps a few things in your browser's own storage, on your device. None of it is sent to us for tracking, and none of it is shared with anyone.

Your Popin draft, in this tab. While you build a Popin page, the draft you are typing is kept in this browser tab (session storage) for up to a day, so a reload or going back does not lose it. Signed in, it is tied to your account: it is cleared when you sign out and never shown to another account. Before you sign in it is tied to no one, like anything else open in that tab, and once you go live it comes back only when that tab returns to the page, with your browser's Back or Forward buttons or a reload. Closing the tab removes it, although a browser that reopens closed tabs may bring it back along with the tab.
Your progress and preferences, on this device. Your Getting started progress and a few preferences (for example whether the menu's "More" group is open) are kept in local storage on this device.
Work you have not saved yet. Some editors keep what you typed but have not saved (a routing flow, or a page brief or a static code's fields on their way to the next screen) in this browser, so a reload does not lose it. Signing out clears it.

Like the cookies above, this is strictly necessary to provide what you asked for, so no consent is asked. Clearing this site's data in your browser removes all of it.

What we do not use

No analytics cookies. We measure scans on our own edge, without a cookie and without storing an identifier for the person scanning. What a scan records is listed in our Privacy Policy. We count visits to our own marketing pages the same way · on our servers, as a page, a country and a referring site, with no cookie, no identifier and nothing that could be traced back to you. A small script of our own, on our own pages, additionally reports which button was pressed, with the same fields and nothing more.
No advertising cookies. We run no advertising and set nothing to profile you.
No third-party cookies. No other company sets a cookie through either brand.
No cross-site tracking. We do not follow you around the web or buy data about you.

Managing cookies

You can delete or block cookies in your browser settings at any time. Because ours are strictly necessary, blocking them has a cost: without the session cookie you cannot stay signed in, and without the preference cookies the app will forget your workspace, theme and language between visits.

You do not need to do anything to "turn off" tracking cookies, because we do not set any.

Changes to this policy

If we ever introduce a cookie that is not strictly necessary (for example an analytics cookie) we will add a genuine consent choice before it is set, and update this page and our Privacy Policy to say so. The date at the top always tells you when this last changed.