COOKIE POLICY – t.my
Last updated: January 21, 2026
This Cookie Policy explains how t.my (“we”, “us”, “our”) uses cookies and similar technologies when you visit our website, use our services, or interact with links created through t.my.
This policy should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device. They help a site function, keep sessions secure, remember limited preferences, and protect against abuse.
Cookies can be:
- First-party cookies – set by t.my
- Third-party cookies – set by essential infrastructure or authentication providers
2. Does t.my use cookies?
Yes — but only essential cookies. These are needed for security, authentication, and reliable link operation.
- Auth/session cookies or similar storage (Supabase Auth) keep you signed in and secure your session.
- Google OAuth sign-in may set or rely on cookies during login; those cookies are governed by Google during the login flow.
- Cloudflare may set strictly necessary cookies for security, bot protection, and load balancing.
- Link redirects work without optional cookies.
We do not use advertising, retargeting, or cross-site profiling cookies, and we do not sell data.
3. Types of cookies we use
a) Strictly necessary cookies
These are required for core operation and safety. They support:
- Session/authentication and keeping you signed in (Supabase Auth)
- CSRF protection and secure redirects
- Bot mitigation and abuse prevention
- Load balancing and performance routing
- Security checks (e.g., Cloudflare protection)
Not used for advertising or marketing; may be linked to a session identifier to keep your account secure. Session-related data may be stored as cookies or similar storage (localStorage/sessionStorage) depending on the browser/app.
Because they are essential, they cannot be disabled without impacting functionality.
b) Optional cookies (currently NOT used)
We do not currently use optional cookies such as:
- Analytics cookies (e.g. Google Analytics, Hotjar, etc.)
- Advertising pixels (Meta, Google, TikTok, etc.)
- Heatmap or session recording tools
- Social media embed cookies
If this changes, we will update this Cookie Policy and provide consent choices where required by law.
4. Third-party services
Strictly necessary services we rely on:
- Cloudflare – security, performance, bot protection, load balancing; may set strictly necessary cookies.
- Supabase – authentication and session management; may set essential cookies or storage tokens to keep you signed in.
- Google – only if you choose Google sign-in; Google may set authentication/security cookies for that login. Google controls those cookies under its policies; they are used for sign-in, not for our marketing.
5. How you can control cookies
You can view, delete, or block cookies in your browser settings (e.g., Chrome, Safari, Firefox, Edge).
Blocking essential cookies or similar storage may prevent login, secure redirects, or core security features from working.
6. Other tracking technologies
Link redirects and core routing work without optional cookies.
Server-side logging (not cookie-based) may be used for:
- IP-based security checks
- Rate limiting
- Abuse prevention rules
Used only for safety and performance, not for advertising or resale.
7. Will this policy change?
If we add analytics, advertising, or other optional cookies, we will update this policy and, where required, provide consent choices. Because we currently use only strictly necessary cookies, a cookie banner may not appear; if optional cookies are introduced, consent tools will be provided where required.
The latest version will always be published at: https://t.my/cookie-policy
8. Contact
If you have questions about this policy, please contact:
t.my
📧 support@t.my
📍 New South Wales, Australia