Cookie policy
Last updated:
This site sets no cookies
The site you are reading is static: it sets no cookies, uses no local storage, includes no analytics or tracking pixels and loads no third-party resources (no fonts, no videos, no maps). That is why there is no consent banner: there is nothing to consent to.
You can check this yourself in your browser’s developer tools, under the network or storage tab.
The application uses technical cookies
At app. + this domain, where you log in, strictly necessary cookies are used to keep the
session. They are the only ones, and they are exempt from prior consent because they are essential to
provide a service the user explicitly asked for.
| Cookie | Purpose | Lifetime |
|---|---|---|
access_token |
Identifies the session on each API request | Short, on the order of minutes |
refresh_token |
Renews the session without asking for the password again | Up to 15 days |
Both are httpOnly (page JavaScript cannot read them), Secure (they only travel over HTTPS) and
scoped to the application’s domain. They are not used for advertising, profiling or audience
measurement.
Payments managed by Stripe
Sign-up and the billing portal open an external page hosted at stripe.com. If the bank requires
authentication for a billing-frequency change, the application loads Stripe.js and displays
Stripe’s secure interface during the process. Stripe may use its own technologies as needed to
process payments and prevent fraud. They are not loaded on the landing page or owned by Tandivia’s
domain and are governed by Stripe’s privacy policy.
How to remove them
Logging out invalidates them. You can also delete them from your browser settings, keeping in mind that doing so ends the session.
If this changes
If analytics or any cookie that is not strictly necessary is added in the future, this page will be updated before it is switched on, and consent will be requested through a mechanism that makes refusing as easy as accepting.