Cookie and tracking notice

On tailwin.com

We set first-party session cookies to keep you signed in, and Stripe sets its own cookies during checkout for payment and fraud prevention. That is the list. No advertising cookies, no cross-site tracking, no third-party analytics scripts. Because everything we set is either strictly necessary or first-party measurement of our own product, there is no consent banner to click through.

In the tools customers embed on their sites

Tailwin customers install our tools on their own websites. What each one does:

• Crawler tracker: no cookies. It observes visits by known AI crawlers (user agent, path without query strings, status, country) and never touches human visitors’ browsers.
• Visitor pixel: one first-party cookie. A pseudonymous visitor id, set on the customer’s domain, so repeat visits count as one visitor. We store the id only as a peppered hash. Page views record path, title, referrer, and campaign tags. Raw IP addresses are used briefly to resolve the visiting company and are never stored; only a peppered hash remains.
• Scan widget and concierge widget: no tracking cookies. They process what a visitor types into them, including an email address if the visitor offers one.

Person-level identification

By default the visitor pixel resolves visits to a company, not a person. A site owner can additionally enable person-level identification, where a data provider (Happierleads, Snitcher, or Opensend) may return contact details such as a name, work email, or title associated with the visiting company. That feature is off until the site owner turns it on, the site owner is responsible for disclosing it in their own privacy notice and for its lawful basis, and the resulting contact records are stored separately so a deletion request removes them completely without touching visit statistics. To object to identification on a specific website, contact that site’s owner; to reach the data anyway, email sgirard@girardmedia.com and we will route the request.

Managing cookies

Every browser lets you view, block, and delete cookies in its settings. Blocking our session cookie signs you out of the app; blocking a site’s visitor-pixel cookie makes each of your visits count as a new visitor and nothing else. See the privacy policy for retention and your rights.