Cookie Notice

Essential cookies

• Session cookie: keeps you signed in, maintains the state of your visit, and supports account security. It is configured as HTTP-only, secure in production, and SameSite=Lax.
• XSRF token cookie: helps protect forms and authenticated actions against cross-site request forgery.

These essential functions support registration, login, project management, testimonial submission, and billing hand-off. Blocking the session or security cookies may stop requested functions from working correctly.

Promotional attribution and the session

An eligible promotional link supplies an opaque gt365_visit URL parameter. TestiFollow removes that parameter from the URL and holds the first valid identifier for up to 15 minutes in its encrypted server-side session while asking for your choice. The browser holds the ordinary session cookie, not the identifier itself. Only acceptance promotes the identifier for attribution. On registration after acceptance, it may move to the account database record; the session copy is removed. No separate persistent attribution-token cookie is created.

This promotional measurement is not necessary to provide TestiFollow's core service merely because it uses the same session infrastructure. The session normally expires after two hours of inactivity; account-level attribution is limited to 30 days. The Privacy Policy explains the related events and retention.

Duration and control

The application session normally expires after two hours of inactivity, although browser and server security settings may end it sooner. Security-token cookies are refreshed as needed during a session. You can delete or block cookies using your browser settings, but essential areas of TestiFollow may then be unavailable.

Choice for promotional measurement

Essential session functions and promotional attribution are distinct purposes. A session cookie being needed for sign-in does not by itself make its promotional use necessary. We ask before using a promotional visit identifier. You can change your choice here at any time; declining does not affect the service.

Your current choice: unknown. For visitors, this preference is kept in an encrypted first-party cookie for 180 days. If you register or sign in, your account choice is saved until you change it. We do not put the visit identifier in this preference cookie.

Contact

For questions about cookies or privacy, email support@testifollow.com or read the Privacy Policy.