Cookie Policy

01What cookies and similar storage do

A cookie is a small piece of information a website stores in your browser. Cookies can maintain a session, support security, or remember a preference. First-party cookies are set by the site you visit; third-party cookies are set by an external provider. Cookies expire after a configured period or when you remove them. Device storage and local browser storage are related technologies but are not all browser cookies.

02Necessary website cookies

The current website uses the Laravel web session and request-protection middleware, which may set a first-party session cookie and an XSRF-TOKEN cookie. Their purpose is session continuity and protection against forged requests. These are not advertising identifiers. Reading the legal pages does not require a TabPick account.

The session cookie name depends on deployment configuration. Its default name is derived from the application name and ends in -session. The default session lifetime is 120 minutes of inactivity, and the request-protection cookie follows the session lifetime. Actual expiry and the exact cookie name can vary with deployment settings; you can inspect them in your browser.

These cookies are used for website operation and security. Blocking them can affect session-dependent or protected features. The native app authenticates its account API requests using session tokens rather than these browser cookies.

03Optional analytics and advertising cookies

The current TabPick marketing and legal pages do not use optional analytics cookies, advertising cookies, tracking pixels, embedded social widgets, or third-party advertising scripts. No optional tracking cookies are activated by accepting or reading these policies.

The split demo runs in the page’s memory using sample amounts. It does not store your selections in cookies or localStorage and resets when the page is reloaded. Fonts, branding images, and application assets are served with the website rather than fetched by your browser from an external font service.

Server request and error logs are separate from cookies and may be processed for operation and security as described in the Privacy Policy. If optional cookies or tracking are introduced, we will update this Policy and provide any required consent choices before using them, including a way to withdraw consent.

04App storage and subscription SDKs

TabPick stores expense records, budgets, friend and group records, receipt images, settings, and authentication information on your iPhone to provide its features. Authentication information is stored using Keychain. Signing in can synchronize supported records with our server.

The app uses Adapty for subscription and paywall services. SDK identifiers and purchase-related processing in the native app are not website advertising cookies. The Privacy Policy describes this processing, including the current setting that disables advertising identifier (IDFA) collection.

Apple, OpenAI, Adapty, or other sites you visit through external links have their own cookie and privacy practices. TabPick does not control cookies set on those external websites.

05Your controls

Use your browser settings to inspect, block, or delete cookies and other site storage. Removing a session cookie can end a session. Consult your browser’s help for the available controls.

Manage camera and photo permissions in iPhone Settings. Removing the app can remove local expense records, but does not necessarily remove Keychain entries, device backups, server-side account data, or subscriptions. Contact us for account or server-data deletion, and manage any subscription separately through Apple.

06Changes and questions

We may revise this Policy when cookies, storage, services, or legal requirements change. The last-updated date identifies this version. Contact us using the details below if you have a question about TabPick’s use of cookies or device storage.