Current position
Tandem currently uses cookies and local storage mainly for strictly necessary authentication, security, app state, and user interface preferences. Tandem does not currently use advertising cookies, social tracking cookies, or analytics cookies in this codebase.
If analytics, session replay, chat widgets, advertising pixels, or similar non-essential technologies are added later, Tandem must add a consent banner and preference center before those technologies run.
Because the current production-intended codebase does not run non-essential tracking, Tandem does not currently need a marketing cookie banner solely for strictly necessary auth/session storage. Confirm this again before launch by reviewing deployed scripts, hosting analytics, support widgets, monitoring tools, and tag managers.
Technologies we use
| Technology | Purpose | Typical retention | Consent status |
|---|---|---|---|
| Supabase auth cookies | Keep web users signed in, refresh sessions, and protect account access | Session or auth token lifetime | Strictly necessary |
| Local storage UI preferences | Remember interface state such as collapsed panels or schedule layout choices | Until cleared, changed, or no longer needed | Functional and low impact |
| Mobile secure storage | Store mobile authentication sessions in secure device storage | Until sign-out, token expiry, app removal, or account reset | Strictly necessary |
| Mobile async storage | Store local drafts, geofence state, visit retry outbox, clock cache, and disclosure acceptance | Until sync, configured cleanup, sign-out, app removal, or manual clearing | Strictly necessary for offline and field workflows |
Managing cookies and storage
- You can clear browser cookies in your browser settings.
- Clearing auth cookies will sign you out of the web app.
- Clearing mobile app storage may remove offline drafts, visit retry state, and local app preferences.
- Customer admins should not disable required auth/session storage because the service depends on it.
Future non-essential technologies
Before enabling analytics, advertising pixels, cross-site tracking, embedded chat, session replay, heatmaps, or similar non-essential technologies, Tandem must update this notice, classify each technology, block it until valid consent where required, and provide a way to withdraw or change consent.