Vi tar inn skredderforretninger i TerzyApp — fra Storbritannia og EuropaSøk nå Hent appen via TestFlight
TerzyApp Logo

Cookie & Tracking Policy

Last updated: August 2026 (rev 1.2)

1. About This Policy

This Cookie & Tracking Policy explains how TerzyApp uses cookies, local storage, device identifiers, software development kits (SDKs), and similar technologies (collectively, "cookies") on our website, mobile applications, and other online surfaces (the "Platform"). It supplements our Privacy Policy and is required by Regulation 6 of the Privacy and Electronic Communications Regulations 2003 ("PECR") in the United Kingdom and Article 5(3) of the ePrivacy Directive 2002/58/EC in the European Union. This Policy is written and executed in English; translations are for information only and the English version prevails as the sole authoritative version for all legal, regulatory, and judicial purposes.

2. What Cookies Are

A cookie is a small text file that a website or app stores on your device. Cookies allow the Platform to remember information about you, your preferences, and your interactions, so that you do not have to re-enter the same information on every visit and so that we can measure and improve how the Platform works. "Similar technologies" include local storage entries set by the website, device identifiers used by our mobile apps, software development kits embedded in our apps, pixel tags or web beacons in our emails, and server-side records associated with your session.

3. Categories of Cookies We Use

We classify cookies into four categories. Strictly necessary cookies are set without consent because the Platform cannot work without them. Functional, analytics, and marketing cookies are non-essential. Analytics is enabled by default on terzyapp.com: Google Analytics runs from your first page view and the Analytics box is pre-selected in the Cookie preferences panel. You can switch it off at any time by clicking "Reject all" or by deselecting Analytics before saving preferences; the opt-out is stored for a year, stops the analytics tag immediately, and clears the Google Analytics identifiers already set in your browser. Marketing remains off unless you enable it.

  • Strictly necessary — session management, authentication, security (anti-CSRF, fraud screening), load balancing, language preference, currency preference, shopping-bag persistence, and consent records. These cookies do not require consent under PECR Regulation 6(4)(b).
  • Functional — non-essential preferences that improve your experience, such as remembering the last-viewed category or hiding tutorial banners after first dismissal.
  • Analytics — aggregated usage measurement to help us understand how the Platform performs. Where we use Google Analytics or a similar service, identifiers are pseudonymised and IP addresses are truncated.
  • Marketing — used to measure the performance of our advertising and, where you have given consent, to show relevant ads on third-party services. Marketing cookies may share data with our advertising partners.

4. Specific Cookies

A list of specific cookies, their purposes, providers, and retention periods is maintained on the dedicated cookie-list page accessible from the cookie banner and from the footer of every page on the Platform. The list is updated whenever cookies are added, removed, or changed in purpose. Specific items currently include:

  • TerzyApp session cookie — strictly necessary, expires at end of session.
  • CSRF protection token — strictly necessary, expires at end of session.
  • Locale and currency preference — strictly necessary, retained for 12 months.
  • Cookie-consent record — strictly necessary, retained for 12 months to evidence compliance.
  • Cookie-consent analytics flag — strictly necessary consent-preference record, retained for 12 months; records whether Analytics was saved as enabled or disabled.
  • Cookie-consent marketing flag — strictly necessary consent-preference record, retained for 12 months; records whether Marketing was saved as enabled or disabled.
  • Google Analytics 4 (where consented) — analytics, retained for up to 14 months.
  • Stripe Connect session token — strictly necessary, expires at end of session; required to load the Stripe checkout module.

5. Consent

Our cookie banner appears on your first visit and allows you to (a) accept all cookie categories; (b) reject all non-essential cookies; (c) make a granular choice between functional, analytics, and marketing categories. In the preferences panel, Analytics is pre-selected because analytics is on by default: it already runs when the banner is shown, and the banner is how you turn it off rather than how you switch it on. If you do not want Analytics, use "Reject all", or deselect Analytics and click "Save preferences"; we then stop the analytics tag and clear the Google Analytics identifiers from your browser. Strictly necessary cookies cannot be disabled because the Platform cannot function without them. You can change your consent at any time from the cookie-settings page linked in the footer; the change applies on the next page load. Where an older TerzyApp consent record says "accepted" before category-specific consent flags existed, and no later Analytics flag says otherwise, we treat that record as prior acceptance of Analytics unless your browser sends Global Privacy Control or you later withdraw consent.

6. Global Privacy Control

Where your browser sends the Global Privacy Control signal (Sec-GPC: 1), we treat it as a valid opt-out request for non-essential cookies and for the "sale or sharing" of personal data for cross-context behavioural advertising under U.S. state law. Receipt of the GPC signal suppresses analytics and marketing cookies regardless of the banner state.

7. Mobile App Identifiers

Our mobile app is published for iOS. It does not collect advertising identifiers such as Apple's Advertising Identifier (IDFA), it does not ask you for App Tracking Transparency permission, and it does not track you across other companies' apps or websites. When you turn on notifications, the app stores a push-notification token so that we can deliver the notifications you have asked for; you can stop this at any time by turning notifications off in your device settings or in the app. Beyond that, the app uses only the identifiers needed to sign you in, keep your session secure, and prevent fraud and abuse, together with the diagnostic information described in our Privacy Policy. None of these identifiers is used for advertising, and none is shared with advertising networks.

8. Third Parties

The third parties that receive data through cookies on the Platform are the same data processors and independent controllers identified in our Privacy Policy, including Amazon Web Services, Stripe, and (where you have consented) Google Analytics. Each third party processes data under its own privacy notice and our contractual data-protection terms.

9. Retention

Each cookie's retention period is shown on the cookie-list page. We retain cookies only for as long as necessary for the purpose they serve. Strictly necessary cookies are typically session cookies (deleted when you close your browser) or short-lived persistent cookies (12 months maximum). Analytics and marketing cookies are subject to the retention periods set by the relevant provider and are not retained beyond 14 months without renewed consent.

10. Changes to This Policy

We may update this Policy from time to time. Where a change is material (a new category of cookies, a new third-party recipient, or a new processing purpose), we will notify you through the cookie banner and request renewed consent. Non-material changes (clarifications, corrections, an updated cookie list) take effect when published. The "Last updated" date reflects the current version.