Trundle Cookie Policy
Last updated: August 2026
1. Introduction
This Cookie Policy explains how Trundle Technologies Ltd (“Trundle”, “we”, “our”, or “us”) uses cookies, tracking pixels, local storage, and similar technologies on our website and application.
This policy should be read alongside our Privacy Policy, which details how we handle your personal data and how you can exercise your data privacy rights.
2. What Are Cookies and Local Storage?
Cookies: Small text files placed on your computer, smartphone, or tablet when you visit a website. They are widely used to make websites function efficiently, remember user preferences, and provide analytics and advertising data to site owners.
Local Storage / Session Storage: Web storage technologies that allow data to be saved locally in your web browser. We use local storage primarily to keep you logged into your Trundle workspace securely between page loads and to preserve temporary user interface state.
3. How We Use Cookies & Tracking Technologies
We categorize our cookies and local storage items into three main functions:
3.1 Strictly Necessary (Consent Exempt)
These items are essential for the operation of Trundle. They enable basic functionality such as user authentication, session security, fraud prevention, workspace separation, and form payment processing via Stripe. Without these technologies, the application cannot function properly.
Legal Basis: Performance of a Contract / Legitimate Interests (Exempt from consent requirements under PECR Regulation 6(4)(b)).
3.2 Performance & Analytics (Consent Required on Our Public Website)
On our public website, we use PostHog only after you enable Analytics cookies. It helps us understand page visits and interactions so we can improve the website. Separately, operational error and performance tools may process technical information where necessary to maintain the security and reliability of the authenticated application.
Key Processors Used: PostHog (consent-based website and product usage analytics), Rollbar (crash monitoring), and Laravel Nightwatch / Langfuse (performance and AI observability).
PostHog Privacy Controls: The website integration uses PostHog’s EU service endpoint. Session recording is disabled, person profiles are disabled, and we do not intentionally send names, email addresses, or other directly identifying information. PostHog does not load until Analytics consent is granted.
Legal Basis: Consent for PostHog analytics on our public website. Necessary security, crash diagnosis, and service-reliability processing may rely on performance of a contract or legitimate interests where applicable and proportionate.
3.3 Marketing & Advertising Cookies (Strict Opt-In Required)
We use Google Ads tracking scripts and cookies to measure the effectiveness of our advertising campaigns, track conversion events (such as account sign-ups), and deliver relevant advertisements to users who have previously visited our website.
Google Data Processing: When you consent to advertising cookies, personal data (such as IP addresses and online identifiers) may be shared with Google. To learn more about how Google processes your data when you interact with our site, please visit Google’s Privacy & Terms Site.
Our Policy: Trundle does not deploy advertising cookies inside authenticated workspaces. Marketing cookies are deployed on our public website only and remain disabled by default until you explicitly accept them.
Legal Basis: Explicit Consent. Under PECR and UK GDPR, marketing cookies are never dropped automatically and require an affirmative opt-in choice.
4. Summary of Cookie & Storage Inventory
Technology / Vendor
Type
Purpose
Trundle Session
Strictly Necessary
Maintains secure authentication and workspace identification.
Stripe
Strictly Necessary
Facilitates secure, PCI-compliant subscription payments and prevents checkout fraud.
Google OAuth
Strictly Necessary
Manages passwordless sign-in sessions for authenticated users.
PostHog
Analytics
Measures consented page visits and interactions to help us improve the website and product experience. Uses PostHog’s EU service endpoint; session recording and person profiles are disabled for the website integration.
Rollbar
Essential Debugging
Captures platform application crashes and technical error logs.
Langfuse / Nightwatch
Essential Operations
Traces AI response latency, server health, and API performance metrics.
Google Ads (_gcl_au, IDE, g_state)
Marketing / Advertising
Measures advertising conversion performance, attributes sign-ups, and tracks campaign efficiency.
Google Tag Manager
Operations / Tag Control
Manages the deployment of analytics and advertising scripts strictly based on your consent choice.
5. How to Manage and Control Your Preferences
You have full control over non-essential tracking technologies:
5.1 On Our Website
You can update, modify, or withdraw your preference choices at any time by clicking the “Cookie settings” link in the website footer. Withdrawing Analytics consent stops further PostHog capture and clears its browser persistence where supported.
5.2 Via Your Web Browser
Most modern web browsers allow you to block or clear cookies through their settings menus. Please note that if you choose to block strictly necessary cookies, key parts of the Trundle application (such as authentication and workspace access) will cease to function properly.
For instructions on how to manage cookies on popular browsers:
6. Updates to This Policy
We may periodically update this Cookie Policy to reflect changes in our technology stack, advertising partners, or data protection laws. Any updates will be posted on this page with a revised “Last updated” date.
