Cookies policy

Effective 2026-09-01.

This document is provided in English. The English version is the official and legally binding version; any translations are for convenience only — in case of conflict the English version prevails.

TSP Core sets a small number of first-party cookies. Strictly-necessary cookies that handle sign-in, security and your consent choice are always set. Everything else — preference storage and our own first-party product analytics — runs only after you accept it in the cookie banner. We set no advertising cookies and no third-party trackers on the dashboard or the landing pages.

Strictly necessary (always set)

• Session cookie (JSESSIONID) — issued after sign-in to keep you authenticated across page loads. HTTP-only and marked secure over HTTPS. Removed when you sign out or the session expires.
• CSRF token cookie (XSRF-TOKEN) — paired with the session and returned on state-changing requests so we can verify they came from your authenticated dashboard rather than a malicious site.
• Consent cookie (tsp.consent) — stores your accept/reject choice from the cookie banner so we don't ask again on every visit. Kept for up to 180 days.
• Device cookie (tsp_device) — a random identifier used for security and abuse prevention: it lets us enforce the per-account device limit and the one-free-trial-per-device rule. Kept for up to 365 days. It is not used for advertising or cross-site tracking.

Set only with your consent

• Analytics identifier (tsp_aid) — a random first-party identifier, kept for up to 400 days, that lets us measure how TSP Core is used (page views, feature usage, the sign-up funnel). The data is sent only to our own servers; we do not share it with, or receive it from, any third party.
• Attribution cookie (tsp_attr) — remembers how you first arrived (referrer and campaign tags) for up to 90 days so we can tell which channels bring users to TSP Core.

If you reject the banner these cookies are never set. If you accepted earlier and change your mind (footer → Cookie settings), they are deleted and any unsent analytics data is discarded.

localStorage

With your consent the site also uses your browser's local storage (not a cookie) to remember non-sensitive preferences — theme, language, chart layout, the last-used timeframe, your active drawing tool, alert sound settings. While you are signed in, some of these preferences (for example saved chart layouts and workspaces) are additionally stored in your account on our servers so they follow you across devices; the rest stays in your browser. None of it is used for advertising.

Your controls

• The cookie banner lets you accept or reject the optional cookies and storage; the Cookie settings link in the footer reopens it at any time.
• Use the dashboard's Sign out action — that invalidates the server-side session and removes the session and CSRF cookies.
• Or clear cookies for tspcore.com in your browser settings.

Clearing the strictly-necessary cookies will sign you out. The dashboard does not function without them.

Third parties

We do not set third-party advertising or analytics cookies. Our edge provider may set a short-lived anti-bot cookie under its own privacy policy; we have no access to its contents.