Cookie Policy

This policy lists the cookies and browser storage TuaniBiz uses, on our own website and dashboards and on the websites we host for businesses, and how to change your choices. Our Privacy Policy explains how we handle the information involved.

The short version

• Our own website and dashboards use only cookies needed to sign in, stay secure and take payments, plus browser storage for preferences and our own usage statistics. We do not use advertising cookies on them. Our own public pages may count visits with Cloudflare Web Analytics, which sets no cookie; the dashboards have no third-party analytics.
• The websites we host for businesses set no cookies by default. If a business has connected Google Analytics, it runs only after a visitor chooses to allow analytics, and never in a browser that sends a Global Privacy Control signal.
• We do not sell personal information or share it for advertising.

On our website and dashboards

These cookies are strictly necessary: without them you cannot sign in, keep your account secure or pay, and each is used only for the purpose shown. Our own sign-in cookies cannot be read by page scripts. "Dashboards" includes a business's dashboard when it is opened on the business's own domain.

Strictly necessary cookies

• tuani_admin_session: keeps TuaniBiz staff and sales representatives signed in to our internal tools. 7 days.
• tuani_support_(id): lets TuaniBiz support open a business's dashboard when the owner asks for help. 60 minutes.
• tb_biz_(id): keeps an owner, manager or team member signed in to a business's dashboard. 30 days.
• tb_dev: remembers a trusted device, so a sign-in code is not asked for every time. Up to 365 days.
• tb_staff_pin_(id): remembers that a team member unlocked their worker portal with their PIN. 30 days.
• tb_aff_google: protects the Google sign-in to our affiliate portal. 10 minutes.
• tb_aff_email: holds the pending email sign-in to our affiliate portal (your email address and a check of the code). 10 minutes.
• sb-(project)-auth-token and its code verifier: keep an affiliate signed in to the affiliate portal, through our authentication provider. Up to 400 days.
• __stripe_mid and __stripe_sid: set by Stripe on pages where you enter a card, to prevent fraud. 1 year and 30 minutes. Stripe's payment forms also run in frames from Stripe, which set Stripe's own cookies.

Browser storage

Your browser also keeps these small items for us. They stay on your device.

• Theme and layout: your light or dark theme and navigation layout (tuani-theme, tuani-chat-theme and the navigation layout key). Kept until you clear them.
• Referral code: the referral or affiliate code in a link you followed, so the discount reaches checkout (tuani_ref). Until you close the tab.
• Business verification: the proof that you verified your business's phone number (tuani_biz_proofs). Until you close the tab.
• Dashboard working state: details carried between dashboard tabs, such as a customer you are booking or quoting (removed as soon as they are read), and reminders of what you dismissed or already sent. Until you close the tab, or until you clear them.
• Dashboard usage analytics: a random session id (tb_session_id) that groups the dashboard features used in one visit. Our server stores only a one-way hash of it. Until you close the tab.
• Recovery: short-lived markers that stop the page from reloading in a loop after an error. Until you close the tab.
• Affiliate portal preferences: which promotion kit you chose and which notices you dismissed. Kept until you clear them.
• Previous drafts: a list of website drafts made on this device, from an older version of our site builder. Kept until you clear it.

Our internal tools also keep working data in the browsers of TuaniBiz staff.

Visit counting on our public pages

Our home page, sign-up, checkout and legal pages may load Cloudflare Web Analytics to count visits, where they come from and how fast pages load. It sets no cookie and stores nothing in your browser; Cloudflare receives the page address, the referring page and your browser's technical details, as it does for any page it serves. It does not run on our dashboards or on the websites we host for businesses.

Notifications and offline support

The business dashboard and the worker portal install a service worker. It shows the notifications you turned on and helps the dashboard recover from a weak connection. The details needed to send you notifications are kept on our servers. The websites we host do not install one.

On the websites we host for businesses

Cookies

These websites set no cookies by default. These are the ones that can appear:

• tb_consent: remembers your cookie choice, and whether your browser sent a Global Privacy Control signal, together with a random id that links the choices made in your browser. It is set only on a website that shows a cookie banner, is strictly necessary, and lasts 12 months. We keep a record of each choice as proof of what you chose.
• Google Analytics cookies (_ga and _ga_(id)), set only if the business has connected Google Analytics and you choose to allow analytics. They help the business understand how its website is used and are sent to the business's own Google Analytics account, set up to receive measurement data only: Google's advertising features and signals stay off. They last up to 2 years, and they are never set in a browser that sends a Global Privacy Control signal.
• Advertising cookies: none are used on these websites today. If one is ever added, it will run only after you allow marketing cookies, and never under Global Privacy Control.

Browser storage

• Chat: whether you closed the chat window (tb_chat_closed_(site)), kept until you clear it, and whether the assistant already greeted you in this tab (tb_chat_greeted_(site)).
• Theme: your light or dark theme for the site (qw-theme). Kept until you clear it.

Website statistics without cookies

Each website counts its page views and taps on its call, email and booking buttons, so the business can see them in its dashboard. These counts use no cookies or identifiers, and we store no IP address with them.

Things a business's website loads from other companies

To display a page, these websites load files from other companies, which receive your IP address and browser details when they do:

• icons and page libraries from public content networks (unpkg.com, cdn.tailwindcss.com and cdnjs.cloudflare.com);
• images from our own storage on Cloudflare and, for some stock pictures, from Unsplash;
• on some page layouts, a Google Map of the business's location, which loads from Google and may set Google's own cookies.

Chat and voice input

The AI assistant on a business's website saves the conversation for the business and uses an AI provider to reply; it says that it is an AI assistant. If you tap the microphone, your browser turns your speech into text using its own speech service (for example, Google's in Chrome or Apple's in Safari) before anything reaches us.

Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information from that browser, and the websites we host keep Google Analytics off, even if analytics was allowed earlier in that browser. We do not sell or share personal information in any case. Our sites do not change their behavior in response to Do Not Track signals, because there is no common standard for them; GPC is the signal we honor.

Changing your choices

• On a website we host that shows a cookie banner, use the Cookie settings link at the foot of the page to change your choice at any time.
• You can also block or delete cookies and site data in your browser's settings. If you block the strictly necessary cookies, you will not be able to sign in or pay.
• To turn GPC on, use a browser or extension that supports it.

Contact

Questions about cookies: dennis@tuanibiz.com.