Legal
Cookie Policy
Which cookies Tlntly sets, why, and for how long.
Effective October 11, 2026
Strictly necessary
These cookies make the site work. They are always on and do not need your consent.
| Name | Purpose | Duration |
|---|---|---|
| authjs.session-token (__Secure- prefix over HTTPS) | Keeps you signed in. | 30 days |
| authjs.csrf-token, authjs.callback-url, authjs.state, authjs.pkce.code_verifier | Protects and completes sign-in with Google or LinkedIn. | Session or 15 minutes |
| organization_id | Remembers which organization you last worked in. | 90 days |
| cookie_consent_2026-10 | Remembers your cookie choice and when you made it (also kept in local storage under the same name). | 12 months |
Signup attribution (with consent)
We set these only after you click Accept. If you then create an account, we store the values on your account so we know which campaigns and referrals bring new customers. The legal basis is your consent (GDPR Article 6(1)(a)). Without consent, nothing is stored and your account has no attribution.
| Name | Purpose | Duration |
|---|---|---|
| referral_code | The referral code of the user who invited you. | 90 days |
| utm_source, utm_medium, utm_campaign, utm_content, utm_term | The campaign, newsletter or site that brought you to Tlntly. | 30 days |
Analytics and browser storage
We measure visits with Plausible Analytics, which uses no cookies and does not identify you. Inside the app we also keep a cache of your workspace data in your browser's local storage to load pages faster, and your theme preference.
Your choice
You can change or withdraw your choice at any time. Withdrawing removes the attribution cookies from your browser. To remove attribution already stored on your account, contact us.
More about how we handle personal data is in our Privacy Policy.