1. Scope
Tuluko Group OÜ (registry code 14335661, Tuukri tn 19-315, 10120 Tallinn, Estonia) is the controller for the cookies set on these sites and in the application. Cookies set inside artifacts that users generate or share are not ours; see Section 5.
2. What cookies are
Cookies are small text files a site stores in your browser; browser storage (localStorage) serves the same purpose without a cookie. First- party entries are set by us, third-party entries by a provider we use. Session entries end when you close the browser; persistent entries last until they expire or you delete them.
3. What we set
| Category | Name | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| Necessary | 4s8-consent (browser storage) | Tuluko Group OÜ | Records your cookie decision so we do not ask again | Until you clear it |
| Necessary | theme (browser storage) | Tuluko Group OÜ | Remembers light or dark mode | Until you clear it |
| Necessary | __cf_bm, cf_clearance | Cloudflare | Bot protection and security for the site | 30 minutes to 1 year |
| Necessary | Session and sign-in cookies (application only) | Tuluko Group OÜ | Keep you signed in to the application and protect your session | Session to 30 days |
| Analytics (consent) | _ga, _ga_* | Google Analytics 4 | Which pages are read, from where, on what device | Up to 2 years |
| Analytics (consent) | ph_*_posthog | PostHog | Product usage events in the application; never prompts, content or results | Up to 1 year |
| Marketing (consent) | none set today | If a campaign-attribution tag is added, it is listed here first |
Necessary entries are set without consent because the site or the application does not work without them; the record of your consent choice is one of them. Analytics and Marketing entries are set only after you agree. All analytics and marketing tags are loaded through one Google Tag Manager container, which itself sets no cookies.
4. Consent and how to change it
On your first visit a banner asks whether you accept analytics cookies. Until you answer, and if you decline, every analytics and marketing tag runs with consent denied (Google Consent Mode v2) and sets no cookies; declining does not limit the site. Your choice is stored in your browser under the name in the table above. To change it, clear this site’s data in your browser and you will be asked again; you can also block or delete cookies in your browser settings at any time. In the application, sign-in cookies are necessary and cannot be declined while you have an account.
5. Third-party content
Video embeds are loaded from YouTube in its privacy-enhanced mode and only after you press play; YouTube then sets its own cookies under its own policy. Artifacts generated on the Platform as HTML pages may load fonts, scripts or images from third-party servers when opened; those servers receive the request and may set their own cookies. We render artifacts in an isolated context and add no trackers of our own to them.
6. Contact
Questions about cookies: [email protected]. For everything else about personal data, see the Privacy Policy.