Cookie policy

1. What cookies are

Cookies are small text files placed on your device when you visit a website. They help a site remember information about your visit, keep services secure and, in some cases, remember your preferences.

This policy also covers similar technologies that store information on your device, such as local storage.

2. What we use

Strictly necessary

Some cookies and storage are needed for the platform to work. They keep you signed in, help keep your account secure, and remember choices you have made where this is necessary to provide something you asked for.

They do not require your consent.

This includes your sign-in session, your cookie preferences themselves, your light or dark theme choice, and any offer you asked us to hold while you sign in.

Our sign-in system is provided through Supabase authentication. Supabase uses session cookies or related browser storage as part of signing you in and maintaining your authenticated session. These are used only where necessary to provide and secure your account and sign-in experience.

Cashback attribution, when you are a member

Joining TOSE means asking us to track your qualifying purchases and pay you cashback on them. Tracking the purchase is how the cashback reaches you — it is part of the service you joined, rather than something added on top of it.

So, when you are signed in and click through to a retailer, the technologies needed to attribute that purchase are strictly necessary for the cashback service you asked us to provide, and we do not ask for your consent to them.

These technologies are set by the affiliate network or retailer on their own websites, rather than by TOSE. If they are blocked or disabled, purchases may not track correctly and we may be unable to attribute cashback to your account.

They have one purpose in this context: attributing your purchase so that your cashback can be paid. We do not use cashback attribution technologies to build an advertising profile of you, advertise to you, or measure how you use the TOSE platform.

If that ever changed, the additional use would not be treated as strictly necessary and we would ask for your consent where required before it took place.

If you are not a member

If you are not signed in to a TOSE account, you have not asked us to provide the cashback service, so the position above does not apply to you.

Any click-out tracking in that situation is optional and falls under the consent choices described in section 4.

In practice, actions that can lead to a tracked click-through — such as revealing a code, claiming a freebie or shopping to earn cashback — ask you to sign in or join first.

Analytics and marketing

We do not currently load any analytics or advertising technologies on TOSE.

Our consent controls are designed so that if we introduce optional analytics or similar non-essential technologies in the future, they will not be loaded unless you have first chosen to allow them.

We would also update this policy to explain what is being used, why it is being used and who provides it.

3. Cookies and storage we set or use

Cashback attribution is not included in this table because those technologies are not set by TOSE. Their duration varies by retailer and affiliate network.

We do not currently set or load analytics or advertising cookies.

4. Your consent

We ask for your consent before using anything that is not strictly necessary, including optional analytics, preference or marketing technologies, and click-out tracking where you are not a member.

Nothing optional is pre-selected, and declining optional technologies is as easy as accepting them.

At present, we do not load an analytics provider. Our consent controls are nevertheless built so that optional analytics or similar technologies introduced in the future are blocked unless and until you choose to allow them.

Cashback attribution for signed-in members is not included in these consent choices because it is part of delivering the cashback service you asked us to provide.

You remain in control. You can choose not to click through to a retailer through TOSE, you can use your browser settings to block relevant technologies, and you can close your TOSE account at any time. Our Privacy Policy explains how we handle personal data associated with your account and cashback activity.

Your consent choice is remembered so that we do not need to ask you on every visit.

You can change your choice at any time using the cookie settings link in the footer.

Withdrawing your consent does not affect anything that took place lawfully while your consent was in place.

5. Third parties

Some technologies involved in providing TOSE services may be operated by organisations that provide services to us or to you.

Authentication

We use Supabase to provide authentication functionality, including managing sign-in sessions. Where Supabase cookies or related storage are used as part of authentication, they are used to provide and secure the sign-in service.

Affiliate networks and retailers

When a signed-in member chooses to shop through TOSE for cashback, affiliate networks or retailers may use technologies on their own websites to record and attribute the resulting purchase.

These organisations may include affiliate networks such as Awin and Impact. Their handling of information is also governed by their own privacy and cookie information.

Content delivery

We use Sanity to deliver some brand imagery and other content.

Loading an image or other asset hosted by Sanity makes a request to Sanity's servers, which means technical information such as your IP address may be visible to them. We do not use this process to place an analytics or advertising cookie on your device.

6. Managing cookies in your browser

Most browsers let you block cookies and other browser storage, and most also let you delete information that has already been stored.

Blocking strictly necessary cookies or storage may stop parts of TOSE from working properly. For example, you may be unable to remain signed in.

Blocking technologies used by retailers or affiliate networks may also prevent a purchase from being tracked, which can mean we are unable to attribute cashback to your account.

Your browser controls operate separately from the consent choices available on TOSE.

7. Changes to this policy

We may update this policy to reflect changes in technology, the law, or the services we use.

If we introduce new optional technologies, including analytics or advertising technologies, we will update this policy and ask for consent where required before those technologies are used.

Any updated version will be published on this page with a new Last updated date.

8. More information

For more information about how we collect, use and protect your personal data, please see our Privacy Policy.