Effective: May 22, 2026. TinyGuard LLC, 7428 SW Ashford St, Tigard, OR 97224. Questions: privacy@tinyguard.co. This Cookie Policy supplements our Privacy Policy.
This policy describes the cookies, pixels, local storage entries, and similar tracking technologies that TinyGuard uses on tinyguard.co (our marketing site). The TinyGuard application at app.tinyguard.co uses only functional, authentication-related local storage entries — no advertising or analytics cookies. The marketing site uses a small set of analytics and conversion-attribution tools, disclosed below.
This policy does not cover the cookies your facility's own users (families, residents, staff) encounter when they use the TinyGuard application; those are technical-essential only, described in the Privacy Policy §9.
These run without a choice prompt because the site doesn't function without them. They are first-party only and not used for analytics or advertising.
| Cookie / item | Purpose | Retention |
|---|---|---|
| cf_clearance, __cf_bm | Cloudflare bot-mitigation and challenge passing | Up to 30 days |
| tg_pref_theme | Remembers your light/dark theme preference | 1 year (local storage) |
We use Google Analytics 4 (GA4) to understand which marketing pages are working — page views, traffic sources, anonymous device class. We have configured GA4 with IP-anonymization and the GA4 default "Google Signals" off. We do not knowingly use GA4 audience-export or remarketing features.
| Cookie / item | Purpose | Retention |
|---|---|---|
| _ga | Distinguishes unique visitors (random visitor ID) | 2 years |
| _ga_<ID> | GA4 session state | 2 years |
| _gid | Distinguishes 24-hour return visitors | 24 hours |
These do not run on page load. They load only when you click into the relevant feature.
| Source | When it loads | What it sets |
|---|---|---|
| Stripe.js | If you reach a checkout / payment page | Stripe-managed cookies for fraud detection + session; see Stripe's Cookie Notice |
California residents have the right to opt out of the "sharing" or "sale" of personal information for cross-context behavioral advertising under the California Privacy Rights Act (CPRA). TinyGuard does not sell personal information for money. Our use of Google Analytics constitutes "sharing" under CPRA's expanded definition.
To opt out, send a request to privacy@tinyguard.co with the subject line "Do Not Sell or Share — CPRA opt-out" and identify the device / browser you want excluded (best effort: include the IP address and a recent visit date so we can correlate). We honor opt-outs within 15 business days; in practice we set the GA4 "user opt-out" flag for your session on subsequent visits and route your traffic through a no-cookie analytics tag.
You can also opt out at the browser level via the Global Privacy Control (GPC) signal, which we recognize per CPRA §1798.135. Browsers and extensions that emit GPC: Brave, DuckDuckGo Privacy Browser, Privacy Badger, OptMeowt, DuckDuckGo Privacy Extension. We treat GPC as an opt-out request on every page load.
You can clear or block cookies at the browser level (Settings → Privacy → Cookies / Site Data on most browsers). Blocking the Strictly Necessary category may break basic site functions like the "I'm not a robot" challenge.
Google offers a browser add-on that disables GA4 across every site (not just tinyguard.co): tools.google.com/dlpage/gaoptout.
We update this policy when our tooling changes. Material additions (e.g., a new analytics provider, a new advertising tracker) will be announced via a website banner for 30 days and noted in the Privacy Policy's subprocessor table per §8.
Cookie or privacy questions: privacy@tinyguard.co
Phone: (510) 686-3357
TinyGuard LLC, 7428 SW Ashford St, Tigard, OR 97224