TTSWP only sets cookies that are necessary to run the site. We set no analytics or advertising cookies, so there is no cookie banner. This applies to both ttswp.com and app.ttswp.com.
Necessary cookies (always on)
These keep the site working: session continuity, CSRF protection, and the cross-domain auth bridge with our app at app.ttswp.com. Under the EU ePrivacy Directive and GDPR Article 6, these do not require consent because they are strictly necessary to deliver the service you asked for.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| ttswp-session | Identifies your browser session so the site remembers you between page loads | ttswp.com | 2 hours of inactivity |
| XSRF-TOKEN | Cross-site request forgery protection on form submissions | ttswp.com | Session |
| tts_auth | Tells ttswp.com that you are signed in to app.ttswp.com so the navigation shows Dashboard instead of Sign In. HMAC-signed payload with no session token. | .ttswp.com | Set by app.ttswp.com (typically tied to your sign-in session length) |
| __cf_bm | Cloudflare bot management: blocks automated traffic and credential stuffing. Set automatically by Cloudflare when Bot Fight Mode is enabled. | .ttswp.com | 30 minutes |
Analytics (no cookies)
We use Loogika, a privacy-focused analytics service, to see which pages people read, how visitors find us, and how many go on to create an account. It sets no cookies.
To count repeat visits as one visitor, Loogika stores one random ID in your browser's localStorage under the key rybbit-visitor-id. The ID is not linked to your name, email address or TTSWP account.
Browser storage transparency
The blog audio player uses the browser's sessionStorage (not cookies) to remember if you dismissed the sticky audio player on a given post. Keys look like ttswp.audio.dismissed.{post-slug}. SessionStorage clears when the tab closes. No tracking, no cross-page persistence beyond the current tab.
Managing cookies
There is nothing to accept or reject, because we set no analytics or advertising cookies. To remove the analytics visitor ID, clear the site data for ttswp.com and app.ttswp.com in your browser. Blocking app.loogika.com in your browser or content blocker turns the analytics off entirely.
You can also block or delete cookies entirely through your browser's privacy settings. If you do that, parts of the site that depend on necessary cookies (sign-in state, session continuity) will not work.
Third parties
Loogika receives page views and usage data for our analytics. Cloudflare provides bot management and may set the __cf_bm cookie automatically as part of that service. Both are bound by their own terms and privacy policies. More about data processing is in our Privacy Policy.
Compliance
Under the EU ePrivacy Directive (Cookie Law) and GDPR Article 6, cookies that are strictly necessary to deliver the service you requested do not require consent. We set no other cookies.
Contact
Questions about this policy go through our Contact page. For details about data processing more broadly, see our Privacy Policy.