Legal
Cookie Policy
Last updated: September 2026
This policy explains what cookies and similar local storage Tofiko uses and why. We use essential and functional storage, and one analytics tool, Microsoft Clarity, whose cookies are set only if you consent. No advertising cookies.
1. What cookies are
Cookies (and browser localStorage) are small pieces of data stored by your browser. They let a site keep you signed in and remember your preferences. They cannot run programs or carry viruses.
2. What we use
| Name | Purpose | Type | Duration |
|---|---|---|---|
| sb-* (Supabase auth) | Keeps you securely signed in to your account. | Essential | Session / token lifetime |
| tf-theme | Remembers your dark / light theme choice. | Functional | Persistent (localStorage) |
| tofiko_cookie_consent | Remembers that you have seen this cookie notice. | Functional | Persistent (localStorage) |
| tf-attribution | Remembers the page you first arrived on and the site that sent you here, so that if you create an account we know which page brought you. It stays in your browser and is sent to us only when you sign up; nothing is stored on our side for visitors without an account. | Functional | 30 days (localStorage) |
| _clck, _clsk (Microsoft Clarity) | Link the pages of one visit, and repeat visits, together for usage analytics. Not set unless you consent — see section 3. | Analytics | 1 year / 1 day |
3. Usage analytics: Microsoft Clarity
We use Microsoft Clarity to see how the site is used — which pages are opened, where people scroll and click, and replays of how a page was used. This helps us find the places where the site is confusing. Until you consent to analytics cookies, Clarity runs without cookies: it gives each page view a new anonymous identifier and does not link the pages of a visit together or recognise you on a later visit. Anything you type is masked in your browser before it is sent, and so are your email address and payment details where the site displays them. Microsoft processes this data as our provider; see our Privacy Policy and Microsoft's privacy statement. We do not use Google Analytics or advertising pixels.
4. Managing cookies
- All modern browsers let you view, block and delete cookies and clear localStorage — see your browser’s help pages.
- Note that blocking the essential authentication storage will stop you being able to sign in.
5. Changes
We will update this policy whenever what we use changes. Clarity's cookies stay off until you consent to them. Vercel, our host, also counts page views without cookies or any identifier stored in your browser. We do not run advertising tools.
6. Contact
Questions about cookies? Email privacy@tofiko.com or read our Privacy Policy.