Skip to content

Legal information

Cookie Policy

Last updated: 29 October 2026

1. About This Policy

This Cookie Policy explains how TidyChat, operated by Aida Technologies S.R.L., uses cookies and similar technologies on our website, application, and embedded chat widget.

These technologies help us provide essential functionality, remember user preferences, maintain security, and, where permitted, analyse website and application usage.

Where required by applicable law, we obtain your consent before using non-essential cookies or similar technologies.

You can accept or reject optional cookies and change or withdraw your consent at any time through our Cookie Settings.

This Policy should be read together with our Privacy Policy.

2. What Cookies Are

Cookies are small text files stored on your device when you visit a website or use a web application.

We also use similar browser technologies, including local storage and session storage.

These technologies include:

  • Session cookies: Temporary cookies that generally expire when your browser session ends.
  • Persistent cookies: Cookies that remain on your device until their expiration date or until deleted.
  • Local storage: Information stored in your browser until it is cleared or removed by the application.
  • Session storage: Temporary information generally retained until the browser tab is closed.
  • First-party cookies: Cookies set by TidyChat or our own domains.
  • Third-party cookies: Cookies set by external service providers whose technologies are used on our website or application.

The use of these technologies depends on their purpose, configuration, and your applicable privacy preferences.

3. Categories of Cookies

Strictly Necessary and Functional Cookies

These cookies and similar technologies are used to provide essential functionality and features specifically requested by users.

They may support:

  • Account authentication and session management.
  • Security and protection against unauthorised access.
  • Cross-site request forgery (CSRF) protection.
  • Remembering cookie consent preferences.
  • Remembering selected language and display preferences.
  • Accessibility settings.
  • Maintaining active chat sessions and other requested functionality.

These technologies do not require consent where an applicable legal exemption applies.

They cannot be disabled through our optional cookie preference controls, although you may be able to block or delete them through your browser settings.

Disabling necessary cookies may affect the availability or functionality of the Service.

Analytics Cookies

Analytics cookies help us understand how visitors interact with our website, measure usage patterns, and improve the user experience.

We currently use Google Analytics on our marketing website.

Google Analytics is activated only after a visitor accepts the Analytics category through our cookie consent banner.

Google Analytics is not currently used inside the TidyChat application.

We may also use PostHog (EU Cloud) for product analytics, feature engagement, and usage insights.

PostHog is not currently active in our production environment and does not currently set analytics cookies through TidyChat.

If PostHog is activated in the future, we will ensure that any required consent is obtained before non-essential tracking begins and update the cookie inventory to reflect its actual configuration.

Marketing Cookies

Marketing cookies and similar technologies may be used to measure advertising performance, understand campaign effectiveness, and support advertising-related activities.

We do not currently use marketing or advertising cookies.

If we introduce marketing tracking technologies in the future, we will update this Policy and obtain any required consent before enabling them.

4. Managing Your Cookie Preferences

When you first visit our marketing website, you can manage optional cookies through our cookie consent banner.

Available choices include:

  • Accepting optional cookies.
  • Rejecting optional cookies.
  • Customising your preferences by category.

Non-essential analytics tracking is disabled until the required consent has been obtained.

You can review or change your preferences and withdraw your consent at any time using the Cookie Settings control available on our website.

When Analytics consent is withdrawn, Google Analytics tracking is disabled immediately, and its scripts are not loaded on subsequent page visits unless consent is granted again.

At the same time, the Google Analytics cookies already stored on your device (_ga and _ga_J02KZFZWHL) are deleted. Strictly necessary cookies, such as your login session and consent record, are not affected.

Where PostHog is used in the future, withdrawal of Analytics consent will also disable the relevant non-essential PostHog tracking.

Withdrawal of consent does not affect processing that was lawful before withdrawal.

You may also manage or delete cookies through your browser settings.

Disabling or deleting certain cookies may affect the availability or functionality of some features.

5. Cookie and Browser Storage Inventory

The following inventory reflects the cookies and browser storage technologies identified in the TidyChat website, application, and embedded chat widget.

Actual usage may vary depending on the features accessed, browser configuration, and consent preferences.

5.1 Strictly Necessary and Functional Cookies

Cookie Purpose Duration
tc-consent Stores cookie preferences, consent timestamp, and policy version 12 months from the latest saved choice
tc-theme Remembers the selected display theme 12 months, refreshed on marketing page visits
NEXT_LOCALE Remembers the selected website language; set only when you switch language or the page language differs from your browser language Browser session
tidychat-session Maintains authenticated application sessions 2 hours after the last activity
XSRF-TOKEN Protects against cross-site request forgery 2 hours, renewed during activity
remember_web_* Supports persistent authentication in the application and admin panel, only when Remember Me is selected 400 days

The tidychat-session and XSRF-TOKEN cookies are set for the .tidychat.io domain and may therefore also be sent by the browser when accessing the marketing website. They are used by the application for authentication and security purposes.

5.2 Analytics Cookies

Cookie Provider Purpose Duration Status
_ga Google Analytics Identifies returning website visitors Up to 2 years, refreshed on visits Active with consent
_ga_J02KZFZWHL Google Analytics Maintains analytics session state Up to 2 years, refreshed on visits Active with consent
ph_*_posthog PostHog EU Cloud Product and website usage analytics 365 days by default, if enabled Currently inactive

Google Analytics cookies are used on the marketing website only and are enabled after the required Analytics consent.

PostHog is not currently configured for production tracking. The duration shown above represents its standard default and will be reviewed against the actual implementation before activation.

5.3 Local Storage and Session Storage

In addition to cookies, TidyChat uses browser storage to provide certain functional features.

Identifier Where Used Purpose Duration
tc-theme Marketing website Stores display theme preferences Until cleared
tc-a11y Website and application Stores accessibility preferences Until cleared
flash_banner Application Stores temporary notification information Until the browser tab closes
bot_test_chat_<id> Application, bot editor Stores temporary test-chat history Until the browser tab closes
tc_widget_<workspace>_token Embedded chat widget Maintains chat continuity across page reloads Until cleared
tc_widget_<workspace>_session Embedded chat widget Maintains chat session information across page reloads Until cleared
Admin panel interface state Admin panel (TidyChat staff only) Remembers interface preferences such as the collapsed sidebar Until cleared

These technologies are used for functionality, preferences, or temporary application state.

Where legally required, consent or another applicable legal condition must be satisfied before accessing or storing information on a user's device.

5.4 Embedded Chat Widget

TidyChat provides an embeddable chat widget that business customers may install on their own websites.

When a visitor interacts with the widget, it may use browser storage to maintain chat continuity, preserve session information, and support the requested communication.

The widget sets no cookies. Its two local storage entries listed above are written only after the visitor starts a chat, are used only to resume that chat after a page reload, and are removed when that chat can no longer be resumed. Nothing is stored before a chat is started, and the widget's error reporting stores nothing in the browser.

The website operator is responsible for providing appropriate information about its use of the widget and obtaining any consent required by applicable law.

The use of these technologies may also be described in the website operator's own privacy and cookie policies.

TidyChat processes information collected through the widget in accordance with its Data Processing Agreement and applicable data protection obligations.

5.5 Other Analytics and Marketing Technologies

PostHog is retained as a potential analytics provider but is not currently active in production.

If PostHog or another analytics provider is activated in the future, this Policy will be updated to reflect the technologies, purposes, and retention periods actually implemented.

We do not currently set marketing cookies.

If advertising pixels or other marketing tracking technologies are introduced, they will be disclosed and subject to applicable consent requirements before activation.

6. Changes and Contact

We may update this Cookie Policy to reflect changes in our use of cookies, analytics providers, technologies, legal requirements, or technical practices.

Material changes will be published with an updated effective date, and we will request renewed consent where required by applicable law.

For questions about this Cookie Policy or your privacy rights, please contact us at [email protected].

Effective from: 2026-10-29 · V003