Tradeforce Pros — Cookie Notice

DRAFT — PENDING ATTORNEY REVIEW. NOT LEGAL ADVICE. Drafted by an AI legal researcher (R-251 item 10, R-252 item 3). Every cookie below was checked against the code on 2026-10-17. Re-check before each new version: adding any analytics, advertising or third-party script changes this notice and may require an opt-out under California law.

Version: 0.1-draft · Effective date: [EFFECTIVE DATE] · Last updated: 2026-10-17

This notice explains the cookies and similar technologies used by the Tradeforce Pros application. It is part of our Privacy Policy.

1. The short version

We use only strictly necessary cookies — the ones that keep you securely signed in — plus one technical marker that lasts ten seconds. We use no analytics, advertising, social-media or tracking cookies, pixels, or third-party scripts, and no third party sets cookies through our application. Because these cookies are required for the Service to work, they cannot be switched off while you use it, and we do not show a cookie-consent banner.

2. Cookies we set

All of our cookies are first-party, are sent only over HTTPS (except on a developer's own computer), and are marked SameSite=Strict, so your browser does not send them with requests started by other websites.

Name	Purpose	Lasts	Readable by page scripts?
tfp_access	Short-lived sign-in token proving who you are on each request	15 minutes	No (HttpOnly)
tfp_refresh	One-time token used to renew your sign-in; replaced every time it is used. Sent only to our sign-in service	Up to 30 days (24 hours during company setup)	No (HttpOnly)
tfp_bounced	Technical marker that prevents an endless redirect loop if your sign-in has expired. Contains only the value "1"	10 seconds	Yes — contains no personal information
sa_access, sa_access_api	Sign-in tokens for Tradeforce Pros' own system administrator (not set for customer users)	15 minutes	No (HttpOnly)
sa_refresh	Renewal token for the system administrator	Up to 30 days	No (HttpOnly)

Your sign-in also ends after a period of inactivity your company sets (5 to 60 minutes), regardless of how long a cookie lasts.

3. Browser storage

The application also stores small technical values in your browser's local and session storage:

• the time your sign-in was last renewed, so that multiple open tabs do not renew at once;
• the time of your last activity and your inactivity limit, so that all open tabs sign out together;
• a short-lived marker while you edit a proposal, used to save your work safely.

None of these contain your name, email, passwords or sign-in tokens.

4. Third parties

• Stripe. When you pay, you leave our application for Stripe's hosted checkout page, where Stripe sets its own cookies (for example for fraud prevention) under its own policies: https://stripe.com/cookies-policy/legal.
• Address suggestions are fetched by our server from Google; Google sets no cookies in your browser through our application.
• Our marketing website (tradeforcepros.com) is a separate site. [FOUNDER TO CONFIRM whether it uses analytics or other cookies; if so, it needs its own notice.]

5. Do Not Track and Global Privacy Control

Because we do not track you across sites or use advertising cookies, there is nothing for these signals to turn off; we do not change our practices in response to them.

6. Managing cookies

You can block or delete cookies in your browser settings, but if you block our cookies you will not be able to sign in.

7. Changes

If we ever add a non-essential cookie, we will update this notice first and, where the law requires, ask for your consent or give you a way to opt out.

Contact: [privacy@tradeforcepros.com]