Cookie policy

We keep cookies to the few the site needs to work. This page lists every one of them.

Last updated 9 October 2026

1. What cookies are

Cookies are small files a website stores in your browser. Browser storage works in a similar way. We use both only for things that make Trichollective work, and never for advertising.

2. What we use

These are set by Trichollective itself. None of them is shared with advertisers.

Name	What it does	How long it lasts
`authjs.session-token`	Keeps you signed in.	Up to 30 days
`authjs.csrf-token`	Protects sign-in forms from forgery.	Until you close your browser
`authjs.callback-url`	Returns you to the right page after signing in.	Until you close your browser
`tc_signin_email`	Remembers the email you asked for a sign-in link with, so the link works.	30 minutes
`tc_ref`	Remembers a colleague's invitation, so your discount and their reward are applied.	30 days
`tc_src`	Remembers which event or campaign brought you to the site, so we can count sign-ups.	60 days
`tc_onboarding`	Remembers how far you got through setting up your account.	90 days
`tc_source (browser storage)`	The same as tc_src, kept in your browser.	60 days
`tricho:currency (browser storage)`	Remembers whether you chose to see prices in pounds or euro.	Until you clear it

On a secure site, the sign-in cookies have a __Secure- or __Host- prefix added to their names.

3. Payments and other services

When you pay, you are taken to Stripe's secure checkout, which sets its own cookies to process the payment and prevent fraud. If you sign in with Google, Google sets its own cookies on its sign-in pages. Their own cookie policies explain these.

4. Your choices

You can block or delete cookies in your browser settings. If you block the sign-in cookies, you won't be able to sign in. If we ever add analytics or other cookies that need your consent, we'll ask you first and update this page. Questions are welcome at karley@trichollective.net, and our privacy notice explains how we handle personal data.