Cookie Statement
TIKKIT — what we store on your device
We place only those cookies that are necessary in order to keep you logged in and to secure the login. We do not measure your behaviour and we do not track you across websites.
1. What this statement is about
This statement describes which information we store on your device, or read from it, when you visit our website (www.tikkit.biz) and when you use the TIKKIT application (app.tikkit.biz, including as an installed app on your telephone).
Besides cookies, we also discuss what we store in the local storage of your browser. Technically that is not a cookie, but it concerns the same question — storing information on your device — and we therefore mention it here for the sake of completeness.
For the question of what we do with personal data, we refer you to our privacy statement.
2. Summary
We place only cookies that are necessary in order to keep you logged in and to secure the login. We do not measure your behaviour, we do not track you across websites, we place no advertisements, and we share no data with advertisers or social media platforms. There is not a single script, not a single image and not a single font from a third party on our website. For that reason we do not ask you for consent and we do not show you a cookie banner: there is nothing to ask consent for.
3. Our website — www.tikkit.biz
On the public website we place no cookies at all.
| Present? | |
|---|---|
| Analytics software (Google Analytics, Matomo, PostHog and the like) | No |
| Advertising or retargeting code | No |
| Social media buttons or embedded posts | No |
| Embedded videos | No |
| Chat widget of a third party | No |
| Fonts from an external domain | No — the fonts are served from our own server |
| Content delivery network of a third party | No |
| Cookie banner | No — there is nothing to ask consent for |
We do keep ordinary server log files (the address requested, the moment, the IP address, the browser type). That is not a cookie, it is inherent in the operation of a web server, and we use it for security and error tracing. See the privacy statement.
Where you complete our contact form, we keep what you fill in and the moment at which you ticked the check box. That is not a cookie, but a record in our database.
4. The application — app.tikkit.biz
As soon as you log in, a small number of cookies is technically unavoidable: without a cookie a web application cannot recognise you at the next change of page and you would have to log in again at every click.
| Cookie | For what purpose | Type | Retention period |
|---|---|---|---|
authjs.session-token (on a secure connection __Secure-authjs.session-token) | Keeps you logged in and contains, in encrypted form, who you are and which role you have | Strictly necessary | Up to 30 days; disappears upon logging out |
authjs.csrf-token (on a secure connection __Host-authjs.csrf-token) | Protects the login form against misuse from another website | Strictly necessary | Duration of the session |
authjs.callback-url | Remembers which page you must be returned to after logging in | Strictly necessary | Duration of the session |
All three are first-party cookies (from our own domain), are HttpOnly wherever possible — so that scripts cannot read them — and are placed with the Secure attribute on a secure connection. None of these cookies is used to track you or to measure your behaviour.
5. What we store in the local storage of your browser
The following data are held in the localStorage or sessionStorage of your browser. They are never sent to our servers; they exist solely to let the application remember your preferences on this device. They contain no personal data.
| Key | For what purpose | Remains |
|---|---|---|
tikkit-theme | Your choice of the light or the dark appearance | Until you erase it |
tikkit-lang | The language you chose on the login screen, so that this screen is immediately correct the next time | Until you erase it |
tikkit-employer-nav-groups | Which menu groups you left open or closed | Until you erase it |
tikki-fab-position | Where you placed the floating button on the screen | Until you erase it |
tikkit.completeProfile.dismissed | That you dismissed the "complete your profile" notice | Until you close the tab |
reminder-dismissed | That you dismissed the reminder to fill in your hours | Until you close the tab |
tikkit-chunk-reload-at | A technical safeguard against an infinite reload loop after an update of the application | Until you close the tab |
We regard these data as strictly necessary or as a mere preference setting with no consequence for your privacy: they remember solely a choice that you made yourself, on your own device, and they do not leave that device.
6. Push notifications and voice input
Push notifications. If you switch on push notifications, your browser registers a subscription for that purpose with the push service of your browser supplier. That happens solely after you have expressly chosen to do so, and you can switch it off again at any moment in the settings of the application or of your browser. It is not a cookie, but we mention it because it does concern information on your device.
Voice input with the assistant. If you use the speech function of the built-in assistant, the application uses the speech functions of your browser. In Chrome and Edge that browser sends your audio to Google for the conversion into text; Safari does this locally. That is done by your browser and not by us: we ourselves do not receive, store or send any audio. We mention it here because it is a data flow to a third party that you may not expect. See also the privacy statement.
7. E-mails that we send
Transactional e-mails — invitations, password recovery, notifications, invoices — contain no tracking pixel and do not measure whether you open them.
Commercial e-mails to undertakings that we approach as a potential customer do contain an invisible image that tells us that the message was opened. We use that solely in order to know whether our messages arrive and are relevant. You may object thereto via privacy@forganiser.com.
8. Managing or erasing cookies
You can always manage cookies via the settings of your browser: view them, erase them individually or in full, or block them.
With TIKKIT there is, however, one practical consequence: the three cookies set out in article 4 are necessary in order to stay logged in. If you block them, you cannot log in and you cannot use the application. There is no technical alternative. For the public website it makes no difference, because we place no cookies there.
You erase the local storage set out in article 5 together with the site data; you then lose only your preferences.
9. Changes to this statement
We adapt this statement whenever we change anything about the cookies used. Should we ever introduce analytics software or any other non-necessary cookie, we will not do so without first asking you for your consent — and then a consent request will indeed appear. The version and the date are stated at the top of this page.