Cookie Policy
Last updated: May 16, 2026
This policy explains how Tanukies uses cookies and related technologies in web experiences.
1. Essential Cookies
Required for core functions such as authentication state, locale preference, security, and session continuity.
2. Cookie We Use Today
| Cookie | Purpose | Retention | Security Attributes |
|---|---|---|---|
| home.locale | Stores your language preference to keep locale consistent across pages. | Up to 365 days | SameSite=Lax, Secure (HTTPS), HttpOnly=No |
| __Host-auth.sid | Stores the authenticated web session identifier. | Session duration (or until explicit sign-out) | SameSite=Lax, Secure (HTTPS), HttpOnly=Yes |
| __Host-auth.csrf | Protects form/API submissions against CSRF (double-submit token). | Short-lived | SameSite=Strict, Secure (HTTPS), HttpOnly=No |
| __Host-auth_pkce | One-time PKCE verifier/state for secure OAuth sign-in flow. | 5 minutes maximum | SameSite=Lax, Secure (HTTPS), HttpOnly=Yes |
| __Host-auth.reauth | Marks recent re-authentication for sensitive operations. | About 15 minutes | SameSite=Strict, Secure (HTTPS), HttpOnly=Yes |
| __Host-auth.mfa | Temporary challenge state during MFA verification. | Short-lived | SameSite=Strict, Secure (HTTPS), HttpOnly=Yes |
These are essential cookies required for account, security, and localization features. In jurisdictions where consent is required only for non-essential cookies, these are typically outside opt-in consent scope.
3. Analytics Cookies
May be used to understand usage patterns and improve product quality. Where required by law, analytics usage should be controlled by consent mechanisms.
4. Third-Party Technologies
Some services (for example authentication, payment, or analytics providers) may set their own cookies under their policies. Those cookies are controlled by each provider.
- Stripe: Cookies Policy
- Apple: Privacy Policy
- Google: Cookies and Technologies
5. Managing Cookies
You can manage cookies in your browser settings. Disabling essential cookies can affect service behavior.
6. Policy Updates
We may update this Cookie Policy when technologies, legal requirements, or service behavior changes. The latest version is always published on this page.
Cookie inventory rows are also reviewed and updated when authentication, localization, or platform integration implementations change.
7. Related Policies
8. Contact
For questions about cookies, contact support.