Cookie Policy

Cookies are small text files placed on your device when you visit a website. They are widely used to make platforms work efficiently, improve user experience, and provide reporting information to operators.

We may also use related technologies:

• Local / Session Storage: Browser storage used to retain session data and preferences.
• Pixel Tags / Web Beacons: Small transparent images used to track page interactions.
• Device Fingerprinting: Collected to assist with fraud detection and platform security.

2.1 Strictly Necessary Cookies

Essential for the platform to function. They cannot be switched off in our systems. They are typically set in response to login, security actions, or form submissions.

• Authentication session tokens (keeping you logged in).
• Security tokens (CSRF protection, request validation).
• Load balancing and server routing.

Legal basis: Legitimate interest / Contract performance. Cannot be opted out of while using the platform.

2.2 Functional Cookies

Enable enhanced functionality and personalisation such as remembering your preferences.

• User preference settings (currency, notifications).
• Language and region preferences.
• Last-visited page and scroll position.

Legal basis: Consent. You can opt out via browser settings without significantly affecting core functionality.

2.3 Analytics and Performance Cookies

Help us understand how visitors interact with the platform so we can improve it. All data is aggregated and anonymised.

• Pages visited, time on page, and navigation paths.
• Error logging and performance monitoring.
• Feature usage statistics.

Legal basis: Consent (EEA/UK). Legitimate interest (other regions). You can opt out — see Section 5.

2.4 Security Cookies

Used to detect and prevent fraudulent activity, bot access, and platform abuse.

• Bot detection and challenge tokens.
• Account security markers.
• Suspicious activity detection.

Legal basis: Legitimate interest.

Some cookies are set by trusted third-party providers. We do not allow advertising networks, social media tracking pixels, or behavioural profiling cookies.

We do not allow any third-party advertising, retargeting, or behavioural profiling cookies on the platform.

• Session Cookies: Erased when you close your browser. Used for authentication and security during your active session.
• Persistent Cookies: Remain on your device for a set period (typically 30 days to 1 year) or until manually deleted. Used for preferences and analytics.

Browser Settings

Most browsers allow you to view, delete, and block cookies:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data.
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Safari: Preferences → Privacy → Manage Website Data.
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data.
• Opera: Settings → Advanced → Privacy & Security → Cookies.

Note: Blocking strictly necessary cookies will prevent you from logging in and using core features.

Opt-Out Links

• Google Analytics opt-out: Google Analytics Opt-out Browser Add-on
• EU interest-based advertising opt-out: Your Online Choices (EU)
• US advertising opt-out: Digital Advertising Alliance

Some browsers transmit "Do Not Track" (DNT) signals. Our platform does not currently alter its behaviour in response to DNT signals, as there is no universal standard for DNT. We will revisit this position as standards evolve.

If you are in a jurisdiction with a legal opt-out right (e.g., California's "opt-out of sale" under CCPA), please contact privacy@twinkletoes.com to exercise your rights.

If you are in the European Economic Area, United Kingdom, or another region requiring prior consent for non-essential cookies, we request your consent before placing analytics and functional cookies on your device.

• You may withdraw consent at any time by adjusting your browser cookie settings or contacting us.
• Withdrawal of consent does not affect the lawfulness of prior processing based on consent.
• Strictly necessary and security cookies do not require consent as they are essential to platform operation.

EEA/UK legal basis: Consent (Article 6(1)(a) GDPR and ePrivacy Directive / UK PECR) for non-essential cookies.

We may update this Cookie Policy from time to time. Material changes will be communicated via notice on the platform and by updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance.