Cookie Policy

This Cookie Policy explains what cookies and similar technologies Tumr uses across its websites and apps. It covers tumr.app and its subdomains (account, sell, send, go, map, admin) and Tumr Stores storefronts.

1. What we use today

Strictly necessary (always on). These are required for the Services to function and cannot be switched off:

• `tumr_session` — a first-party session cookie on `.tumr.app` that keeps you signed in as you move between Tumr apps (SSO). Expires after 30 days or when you sign out.
• Authentication tokens in browser storage — web apps store your sign-in token in `localStorage` so your session survives page reloads.
• CSRF/security tokens — set where a flow requires them.
• `tumr_consent` — remembers your cookie and tracking choices (anonymous id + selected categories).

Functional. Preferences such as language/locale selection and map view state may be kept in browser storage to make the product work the way you left it.

2. What we do not use today

We do not currently run third-party advertising cookies, advertising pixels, or cross-site tracking tags, and we do not sell data to advertisers.

3. Analytics and optional categories

Optional categories—analytics, personalization, and marketing—are off unless you enable them. Your choice is recorded against your account (or an anonymous consent id before you sign in) and can be changed at any time under Account → Privacy & data. If we introduce an optional tracker in the future, it will be listed here and gated behind your consent before it loads.

4. Managing cookies

• In-product: Account → Privacy & data → Cookie preferences.
• In your browser: you can block or delete cookies via browser settings. Blocking essential cookies will sign you out and may break checkout or sign-in.

5. Changes

We update this policy when the cookies or storage we use change. The version and effective date above show which text is current.

Contact: [email protected]