1. What cookies are
Cookies are small text files a website stores in your browser. Similar technologies, such as local storage and session storage, store information in the same way. This policy covers all of them.
2. Our approach
We keep this list short on purpose. We do not use advertising cookies, cross-site tracking, social media pixels or analytics cookies. Every item below is either strictly necessary to provide a service you asked for, or remembers how you want the site to look, so none of them needs your consent. We still tell you about them, and you can remove them at any time.
3. Cookies we set
| Name | Type | Purpose | Duration |
|---|---|---|---|
__Host-tb_session | Strictly necessary | Keeps you signed in after you verify your mobile number. | 7 days, renewed while you use the site |
__Host-tb_csrf | Strictly necessary | Protects signed-in actions against cross-site request forgery. | Session |
__Host-tb_flow | Strictly necessary | Links your phone verification to the request you are completing in this browser. | 1 hour |
__Host-tb_voter | Strictly necessary | A random ID that stops the same browser voting for a roadmap item more than once a day. Only set if you vote. | 12 months |
4. Other browser storage
| Name | Where | Purpose | Duration |
|---|---|---|---|
mk_theme | Local storage | Remembers whether you chose the light, dark or system theme. | Until cleared |
tb_cookie_notice | Local storage | Records that you dismissed the cookie notice so it is not shown again. | Until cleared |
tb_presence | Session storage | A random ID used to count how many people are browsing right now. It is not linked to you or your account. | Until the tab is closed |
5. Third-party services
- Cloudflare Turnstile runs an anti-bot check on phone verification, request, review and roadmap vote forms. Cloudflare processes technical data such as your IP address and browser characteristics to do this.
- Stripe handles subscription checkout on its own pages and may set cookies on its domain for fraud prevention when a business pays. We do not load Stripe on the public directory.
- Google is contacted only when you choose Google sign-in. Google Maps listing photos and reviewer images are served through Totabiz rather than loaded directly from Google in your browser.
We do not embed third-party maps, videos or social media widgets.
6. Managing cookies
You can view and delete cookies and site data in your browser settings. Blocking the strictly necessary cookies stops you signing in or completing a request. If we ever introduce optional cookies, we will ask for your consent first and update this policy.
7. Contact
Questions about cookies can be sent to our contact page. See also our Privacy Notice.