Cookie Policy

This Cookie Policy explains how TopoTopic uses cookies and similar technologies on topotopic.com. Cookies are small text files that your browser stores on your device. Under Austrian law (section 165(3) of the Telecommunications Act 2021, which implements the EU ePrivacy rules), storing or reading information on your device requires your consent unless it is strictly necessary to provide a service you have asked for.

We use two categories of cookies and device storage:

• Essential: sign-in, security, your consent and acceptance records, and state that a feature you are using depends on, such as a recording in progress or a display setting you chose. These are strictly necessary for the Service you request and are used without consent.
• Analytics: optional usage and advertising measurement: our own first-party measurement, Google Analytics, Google Ads conversion attribution, and PostHog, including masked session replays. Google receives measurement identifiers, events, and any available advertisement click identifier so that sign-ups and first sessions can be associated with advertisements. Advertising personalization stays disabled. Analytics scripts, their network requests and the analytics identifiers listed below stay off until you give analytics consent.

The Privacy Policy describes the personal data involved, and the Legal Notice / Imprint identifies who is responsible.

On your first visit a consent banner offers "Accept all" and "Essential only" with equal prominence, and "Customize" to see both categories. Analytics is off until you choose otherwise. Your choice is stored in an HTTP-only consent cookie and in browser storage. It is also recorded on our servers when you enable analytics or when an analytics session already exists for your browser; an "Essential only" choice made in a new browser is stored in that browser only.

You can change or withdraw your choice at any time with "Cookie preferences" at the foot of public pages, or in Settings, Privacy when you are signed in. Withdrawing analytics consent stops further analytics collection from that browser and removes our own analytics and attribution cookies listed below; the Google and PostHog cookies are no longer used and expire on their own. It does not switch off essential cookies, and it does not delete analytics records collected while consent was given; those expire on the schedule in the Privacy Policy.

Consent is stored per browser and device. Changing it on one device does not change it on another. When you enable analytics the page reloads once, so that the browser security policy that blocks analytics endpoints can be replaced with one that permits them.

Accepting the Terms of Service or confirming that you have read this policy never enables analytics. Analytics consent is a separate choice.

We do not respond to browser "Do Not Track" or Global Privacy Control signals, and we do not read or record them. Analytics stays off unless you enable it, whatever those signals say.

The table lists production cookie names. Most carry the __Host- or __Secure- prefix for additional protection, and every cookie that the Service sets itself has the Secure flag and a SameSite restriction.

Consent cookies set by earlier versions of the Service are not read as consent. They are removed the next time you save a choice.

Paid billing is not enabled. If it is enabled and you open a checkout or billing page, Stripe, the payment processor, sets its own cookies (for example __stripe_mid and __stripe_sid) to run the payment and prevent fraud. Google sets its own cookies on its sign-in pages when you choose Google sign-in.

A link to a YouTube video in a message is shown with YouTube's embedded player and thumbnail once the message is on screen. The player loads from youtube-nocookie.com and sets no cookies before you play the video. Google receives your IP address when the player or the thumbnail loads. Links to posts on X are shown as plain links.

Besides cookies, the Service uses browser storage (localStorage, sessionStorage and IndexedDB) on your device:

• Consent record (essential): a copy of your cookie choice, so that the banner does not reappear on every page.
• Sign-in support (essential): short-lived markers that coordinate sign-in, sign-out across tabs, and the legal acceptance check.
• Settings you chose (essential): display settings, panel layouts, language and capture settings, dismissed hints, and per-conversation view state.
• Recording and upload support (essential): a random identifier for this browser as a recording device, which lets an interrupted recording reconnect to the same session; per-tab recorder state and capture locks; and upload jobs that can resume after an interruption, with their file names, kept for up to 24 hours.
• Offline data (essential): an offline copy of your learning feed, and learning actions waiting to be sent (IndexedDB).
• Page recovery (essential): a timestamp that stops a page from reloading itself repeatedly after an error.
• Analytics support (consent required): analytics identifiers, first-visit attribution, deduplication markers and the version of the analytics description you agreed to, written only while analytics is enabled.

The Service does not register a service worker and does not use the Cache Storage API.

Most browsers let you remove or block cookies and clear site data. Blocking essential cookies prevents sign-in from working, and clearing site data shows you the consent banner again.

Questions about cookies and consent: support@topotopic.com.