Cookie Policy
Effective and last updated: 21 October 2026
This policy lists every cookie and every browser-storage key the Service sets, what each one does and how long it lasts. We do not use advertising cookies. Self-hosted Umami measures pageviews and completed signups without analytics cookies. Optional account-linked product analytics starts only after you allow it in Settings → Data & privacy. Campaign labels in landing links are saved in local storage so they survive navigation to signup. The separate invite-reminder cookie is set when you accept an invite.
1. What these technologies are#
A cookie is a small text file your browser stores for a website. Local storage and session storage are similar stores controlled by the page. The tables below distinguish sign-in and functional storage, optional product measurement, and campaign attribution. Cookieless web analytics does not write a visitor identifier to these stores.
3. Local and session storage#
Campaign attribution uses localStorage key tpp.signup-attribution.v1. It remembers the first nonempty ref, utm_source, utm_medium, and utm_campaign from landing links until you clear site data. These campaign labels are saved with a new account and sent with the cookieless signup event. It does not store a generated visitor identifier.
These keys live in your browser. Where needed for a requested feature or consented analytics, the app may send the relevant identifier to our API:
| Keys | What they store | Category |
|---|---|---|
| tpp-theme, tpp-theme-preset, tpp-accent, theme | Appearance: theme, preset and accent colour. | Functional (your choice) |
| tpp_has_session | Whether a session exists on this device. | Strictly necessary |
| tpp:activity-session | A random per-tab identifier created only after analytics consent. Sent with optional activity to our API; removed when tracking stops. It can be linked to your account and is treated as personal data. | Optional measurement (prior consent) |
| ai-tutor-open-conversation, ai-tutor-pending-project-draft, ai-tutor-voice, ai-tutor-voice-language, ai-tutor-voice-roster, tpp.memory.topicsSeen | Intelligence: the open chat, an unsent draft, your voice and language choice and which memory topics you have seen. | Functional (your choice) |
| market-monitor:settings, market-monitor:pending-custom-indicator, indicator-studio:initial-prompt, backtesting:launch | Market Monitor layout, an indicator you were about to add and a backtest you were about to open. | Functional (your choice) |
| tpp:dismissed-banners, tpp:news:last-seen, tpp:push-synced, tpp:prefs:last-owner, tpp-landing-scroll | Banners you dismissed, when you last opened news, whether push settings were synced, which account last used this browser and your scroll position on the home page. | Functional |
| tpp:visual-demo and demo keys | State of the interactive demo when you try the app without an account. | Functional |
| enforcementAppealPending, enforcementAppealStatus | That an appeal can be filed after an account restriction, and the restriction's status (the authorization itself is the tpp_enforcement_appeal cookie). | Strictly necessary |
| tpp_mfa_pending | That a sign-in is waiting for your authenticator code (the challenge itself is the tpp_mfa_challenge cookie). | Strictly necessary |
4. Content from other companies#
Some pages load content straight from another provider inside the page. Your browser then sends a request to that provider, which may set its own cookies under its own privacy policy. We do not control them, and we do not pass them your journal, trades or conversations.
- TradingView charts in Market Monitor (privacy policy).
- Giphy and Tenor GIFs in the message composer, loaded only when you open the GIF picker.
- Stripe Checkout and billing portal, which open on Stripe's own domain when you pay or manage billing (privacy policy). Stripe uses cookies for fraud prevention.
- Google when you choose to sign in with Google.
- Cloudinary serves the images and videos you and other users upload.
5. What we do not do#
- No advertising cookies, no retargeting pixels, no social-media tracking buttons.
- No third-party analytics script. Product measurement is first-party and described in the Privacy Policy.
- No tracking across other websites. Cookieless Umami statistics use short-lived aggregation without a persistent visitor identifier.
- We do not sell or share personal information for cross-context behavioural advertising, so a Global Privacy Control signal does not change how the Service works.
6. Your choices#
You can delete or block cookies and site data in your browser settings at any time; the Service will still load, but you will be signed out and preferences will reset. Appearance, voice and layout choices can be changed in Settings. Change optional analytics consent in Settings → Data & privacy; withdrawal also deletes optional activity. Browser privacy signals block optional analytics and cookieless Umami events. Clear this site’s local storage to remove campaign attribution, or its cookies to remove an accepted invite. Questions go to privacy requests.
Who we are and how to contact us
TheProfitPath
The operator's registered name and postal address are being finalised and will be published here. Until then every notice below reaches the operator directly.
- Legal notices and disputes: [email protected]
- Privacy requests: [email protected] or the privacy request form
- Illegal content, abuse and copyright notices: [email protected] or the report content form
- Digital Services Act point of contact for authorities and users: [email protected] (English, Slovenian)
- Security vulnerabilities: [email protected]
- Everything else: contact support or the in-app support chat
All legal documents
- Terms of ServiceThe agreement that governs your account, subscriptions, AI features, community and the developer API.
- Privacy PolicyWhat personal information we collect, why, who receives it, how long we keep it and the rights you have wherever you live.
- Cookie PolicyThis page
- Refunds, Cancellation and WithdrawalHow to cancel, when a refund applies, the 14-day withdrawal right for EU and UK consumers and the model withdrawal form.
- Acceptable Use and Community GuidelinesWhat you may not do on the Service, how content is moderated, how to report content and how to appeal a decision.
- AI Transparency NoticeHow the AI features work, which providers process your prompts, what is synthetic and what you should not rely on.
- Data Processing AddendumThe processor terms that apply when an organization uses the Service with its members' personal data.
- SubprocessorsThe third parties that process personal information on our behalf, where they are and what they do.
- Accessibility StatementOur accessibility target, known limitations and how to report a barrier.
- Legal NoticeWho operates TheProfitPath, how to reach us for legal, privacy, copyright and safety matters, and the full list of legal documents.
- Report contentReport illegal content, abuse, impersonation or a copyright problem.
- Privacy requestExercise a data protection right without signing in.
- Cancel subscriptionCancel a paid plan without signing in.