Policy
Last updated: 17 August 2026 · Applies to TrueSmush (GDPR, ePrivacy, UK GDPR, CCPA)
Cookies are small text files placed on your device by websites you visit. Browser storage (like localStorage) is a similar mechanism that lets a site keep small amounts of data in your browser. Both help websites remember you and your preferences between visits. This policy explains what we store, why, and how you can control it.
TrueSmush keeps things simple: we do not use third-party tracking, advertising, or social cookies, and we have no analytics cookies. Everything we store is either essential (to make the site work, like keeping you logged in) or a preference you chose yourself (like the “email sent” message or the consent choice itself). All data lives in your browser — we never read it server-side beyond what you explicitly send.
The table below lists everything the site stores in your browser. None of it is shared with third parties.
When you first visit, our consent banner asks you to Accept all or choose Essential only. Your choice is stored as tp_cookie_consent and you can change it at any time via the “Cookies” link in the footer — the banner will reopen so you can update your decision. Essential storage (session, security) is required for the service to function and is not optional.
Depending on where you are, you may have rights over the data we hold: the right to access, correct, or delete your personal data (GDPR / UK GDPR), to data portability, and — for California residents under the CCPA — the right to know what we collect, to request deletion, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information. To exercise any of these rights, contact us at [email protected] and we will respond within the timeframes required by law.
We do not use third-party cookies, advertising networks, or social media pixels. Because we are hosted on Vercel and served through Cloudflare, those providers may process technical data (such as IP addresses) to deliver and protect the service, but they do not set cookies for tracking purposes on our site.
You can clear or block browser storage at any time: in most browsers, use Settings → Privacy (or Cookies) → Clear browsing data, or block sites from storing data. Note that clearing essential storage will log you out and reset your consent choice (the banner will ask again).
We may update this Cookie Policy as our services evolve. When we do, the “Last updated” date below changes, and material changes will be noted on the status page or blog. Continued use of the site after changes means you accept the updated policy.
Questions about cookies or your data? Email [email protected], or open an issue on GitHub (gadookteam/tinypixel). We usually reply within one business day — faster if the kettle is already on.
| Name | Type | Purpose | Storage | Expiry |
|---|---|---|---|---|
| tp_cookie_consent | Essential | Remembers your cookie consent choice so the banner only asks once. | localStorage | Until cleared |
| tp_session | Essential | Session token that keeps you logged in to your account and dashboard. | localStorage | 30 days (token TTL) |
| tp_user | Preferences | Cached account display info (email/name) for the UI. | localStorage | Until cleared |
| tp_keyreq_email | Preferences | Remembers the email you requested an API key for, so the “email sent” message survives a page reload. | localStorage | Until cleared |
Need more detail? Read the privacy policy, refund policy, or contact us.