Cookie Policy
Which cookies the website and app use, and why.
Draft: this document is still being reviewed by a lawyer. Text in [square brackets] is a placeholder that will be filled in before the final version.
DRAFT v0.1 (2026-10-23). Not legal advice. Cookie names are expected values and must be verified against the live site before publication. Based on art. 11.7a Dutch Telecommunications Act (Telecommunicatiewet) and the GDPR.
Last updated: 24 October 2026. Controller: TimeTracking, see the privacy policy.
1. Default: only functional cookies
When you visit timetracking.tech we only place cookies (and similar techniques such as localStorage) that are strictly necessary for the site or app to work. These do not require consent. Analytics are only loaded after you click "Accept analytics" in the cookie banner. We use no advertising, retargeting or social-media tracking cookies.
"Reject" is as easy as "Accept" (same banner, same prominence). You can change your choice at any time via "Cookie settings" in the footer.
2. Cookies we use
Strictly necessary (no consent required)
| Name | Set by | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE |
timetracking.tech | Remembers your chosen language (20 languages) | 1 year |
tt_consent |
timetracking.tech | Stores your cookie choice | 12 months |
sb-<project>-auth-token |
timetracking.tech (Supabase Auth) | Keeps you logged in to the web app | Session / up to 90 days on trusted device |
__stripe_mid, __stripe_sid |
Stripe (only on checkout/billing pages) | Payment processing and fraud prevention | 1 year / 30 minutes |
__vercel_* [verify if any] |
Vercel | Load balancing / deployment protection | Session |
Analytics (only after consent)
| Name | Set by | Purpose | Duration |
|---|---|---|---|
ph_<project>_posthog (cookie/localStorage) |
PostHog EU Cloud (Frankfurt) | Pseudonymous statistics on page visits and feature use, to improve the site | 12 months |
PostHog settings: EU hosting, IP truncated, session recording off on pages with personal data, no cross-site tracking, no sharing with third parties for advertising.
3. Mobile apps, desktop app and extension
The apps do not use cookies for tracking. They store login tokens and preferences locally on the device. Product analytics in the apps for logged-in users are described in the privacy policy, section 4.
4. Withdrawing consent
Click "Cookie settings" in the footer or delete cookies in your browser. After withdrawal no further analytics data is collected; existing data is deleted after at most 12 months.