Cookies and browser storage

Marketing website analytics

The marketing website loads Google Analytics 4 using measurement ID G-S57Y5FFHJX. GA4 collects page views and the interaction events described in the Privacy Policy. It may set first-party cookies such as _ga and a measurement-specific _ga_* cookie, and it may use browser identifiers. Google controls the exact names and lifetimes of its analytics cookies.

The configured Cloudflare Web Analytics token is empty, so that analytics beacon is not currently rendered. Cloudflare still delivers and protects the website.

Marketing website storage

The website uses local storage for the assigned signup-message variant, the date a signup prompt was shown, signup intent, and dismissal of the getting-started bar. It uses session storage for the current visit, temporary signup-prompt dismissal, signup intent, and allowed campaign attribution values.

These browser-storage entries support interface behavior and attribution. Clearing site data resets them. The read-only demo keeps its sample state in the page and does not send the sample couple's entries to the Tiptoe app.

App session cookies

The web app sets tiptoe_session_id, tiptoe_session_access, and tiptoe_session_refresh to keep a signed-in session. They are Secure, HttpOnly, SameSite=Lax cookies scoped to the app. The session cookies can last up to 30 days and are cleared when you sign out.

Google sign-in temporarily sets tiptoe_session_oauth_state and tiptoe_session_oauth_verifier for up to 10 minutes, then deletes them after the callback. They protect and complete the sign-in flow.

Invite, return, and poster cookies

The app can set tiptoe_invite for up to 7 days so an invite can be used after sign-in, and tiptoe_next for up to 1 hour so the app can return you to a safe relative path. A scanned campaign poster can set tiptoe_poster for up to 30 days for attribution. These are Secure, HttpOnly, SameSite=Lax cookies.

Your choices

You can clear website data in your browser. Blocking app session cookies prevents web sign-in from working. Browser controls can limit GA4 cookies, though settings and extensions differ. Email [email protected] with questions.