Tarosyn Legal

Cookie Policy

Last updated May 31, 2026

This Cookie Policy explains how Tarosyn LLC ("Tarosyn," "we," "us," or "our") uses cookies, local storage, and similar technologies when you use the Tarosyn web app, mobile app, and related services (the "Service"). It should be read alongside our Privacy Policy.

1. what are cookies and similar technologies?

Cookies are small text files placed on your device by a website or app. Similar technologies include:

Local storage / Session storage — key-value stores in your browser that persist data without a server round-trip. IndexedDB — a browser database used for larger structured data (e.g., offline caching). Secure credential storage (native apps) — on iOS and Android, Capacitor may store auth tokens in the device's secure keychain or equivalent.

Together we refer to all of these as "cookies" throughout this policy for brevity.

2. essential cookies

These cookies are strictly necessary for the Service to function. You cannot opt out of them while using Tarosyn.

Name / Key Storage Purpose connect.sid HTTP cookie Session authentication — keeps you signed in across page loads. HttpOnly, Secure, SameSite=Lax. tarosyn_guest_token Local storage Identifies anonymous guest sessions so readings and preferences persist before account creation. tarosyn_shadow_token Local storage Short-lived token used during cross-tab auth flows (e.g., Apple Sign-In callback). Cleared after use. tarosyn_visit_started Session storage Tracks whether a visit has already begun to prevent repeated onboarding screens in the same session. tarosyn_app_launched Session storage Records that the user explicitly launched the app (vs. visiting the marketing site) to route them correctly.

3. analytics cookies

We use lightweight first-party analytics to understand how the Service is used and to improve it. No personal identifiers are sent to third-party analytics platforms.

Name / Key Storage Purpose tarosyn_analytics_* Local storage First-party event tracking (e.g., app_open, reading_started). Data stays on our servers and is used only to improve the Service.

We do not currently embed Google Analytics, Mixpanel, or any other third-party analytics SDK. If this changes, this policy will be updated before any new tracker is activated.

4. marketing cookies

We do not currently use marketing or advertising cookies. We do not serve third-party ads, track users across external sites, or share cookie-derived data with advertising networks.

If we introduce marketing cookies in the future, we will update this policy, obtain your consent where required by law, and provide clear opt-out controls before any marketing tracker is placed.

5. third-party technologies

Some third-party services integrated into Tarosyn may set their own cookies or use similar technologies when you interact with them directly:

Stripe — if you visit a Stripe-hosted checkout or payment form, Stripe may set cookies for fraud prevention and session management. These are governed by Stripe's Privacy Policy. Apple / Google Sign-In — identity provider flows may set cookies to manage the OAuth handshake. These are set and controlled by Apple and Google respectively. Push notifications (APNs / FCM) — token identifiers are stored server-side; no third-party cookies are placed on your device for this purpose.

Tarosyn does not control cookies set by third parties. Refer to each provider's own cookie/privacy policy for details.

6. how to manage cookies

You have several options to control cookies and similar technologies:

Browser settings — all modern browsers let you block or delete cookies. Note that blocking essential cookies will break sign-in and core features. Common controls: Chrome: Settings → Privacy and security → Cookies and other site data Safari: Settings → Safari → Privacy & Security Firefox: Settings → Privacy & Security → Cookies and Site Data Clear local storage manually — in your browser's developer tools (Application → Local Storage / Session Storage → tarosyn.app) you can delete any key at any time. Native app (iOS / Android) — uninstalling the app removes all stored tokens and credentials. Individual permission grants (e.g., notifications) can be revoked in your device's app settings without uninstalling. Sign out — signing out destroys your server-side session and clears the session cookie. Guest and shadow tokens are also cleared on sign-out.

7. changes & contact

We may update this Cookie Policy to reflect changes in our technology or legal obligations. Material changes will be communicated through the Service or by email, and the "Last Updated" date above will be revised.

For questions about cookies or this policy, email us at: [email protected]

Tarosyn LLC, United States.

Manage cookie preferences Privacy Policy Terms of Service Company Hub