Cookies and local storage
Tiny Accounts sets no cookies of its own and no advertising cookies at all. It does keep a few things in your browser's local storage, and it can load one analytics script — but only with your consent.
Your choice
Analytics is off until you accept it, and you can change your mind here at any time. The choice itself is remembered in your browser.
Strictly necessary storage
These are set by the app itself, in local storage rather than cookies, and cannot be turned off without breaking the product. They never leave your browser except where stated.
| Key | Purpose | Lifetime |
|---|---|---|
tiny-accounts-auth-token | Your signed session token. Sent to our own API as an Authorization header on every request so the server knows which account is asking. | Until you log out or clear site data |
tiny-accounts-auth-user | Your email and currency preference, cached so the app can render before the session check completes. | Until you log out or clear site data |
Functional storage
| Key | Purpose | Lifetime |
|---|---|---|
theme | Remembers light or dark mode. | Until cleared |
sidebar-collapsed | Remembers whether the sidebar is collapsed. | Until cleared |
analytics-consent | Remembers the choice you made above, so you are not asked again. | Until cleared |
Analytics — consent required
If you accept, the app loads Vercel Analytics, which records page views and a small number of product events (for example that a signup happened, and whether it was a guest or email signup). It is designed to work without cookies and without building a profile that follows you across sites. If you reject, or simply do not answer, the script is never loaded and no request to it is made.
Vercel also operates the hosting for this app, and like any web host processes request metadata such as IP address in order to serve pages. That is a necessary part of delivering the site and is covered in the privacy policy.
Other third parties
Fonts are served from Google Fonts at build time and bundled with the app, so your browser makes no request to Google while you use it. Database access goes to Supabase, our data processor, through our own API — never directly from your browser. There are no ad networks, social widgets, session recorders or chat widgets.
Clearing storage yourself
Every browser lets you clear local storage for a site (usually under Settings → Privacy → Site data). Clearing it signs you out and resets the choices above. Deleting your account removes the server-side records as well; see the privacy policy.
Questions
Write to [PLACEHOLDER - support contact email].