Cookie Policy

TrustPin is operated by Capa7 LLC, a Wyoming limited liability company ("we", "our", "us"). This Cookie Policy explains how we use cookies and similar technologies on the TrustPin website (trustpin.cloud) and web console (app.trustpin.cloud). It should be read together with our Privacy Policy and Sub-processor List.

1. What are cookies

Cookies are small text files stored on your device when you visit a website. Similar technologies (local storage, pixels, SDKs) work in comparable ways. They help a site function, remember preferences, and understand usage.

2. How we use cookies

We keep cookie use to a minimum. We group cookies into three categories:

• Strictly necessary: required for the site and console to work (session, authentication, security). Set without consent because the service cannot operate without them.
• Preference: remember non-essential choices such as theme or language. Set only with your consent.
• Analytics & performance: help us understand how the site and console are used so we can improve them. We use Vercel Web Analytics (on both the marketing site and the console) and Vercel Speed Insights (on the marketing site only): cookieless, first-party measurement provided by our hosting platform that stores nothing on your device and produces aggregate statistics only. These run by default on the basis of our legitimate interest in understanding how the site is used. On the marketing site we also use Google Analytics 4, which sets cookies (_ga, _ga_*) and shares usage data with Google; it loads only with your consent.

We do not use cookies for cross-site advertising and we do not share cookie data with advertising networks.

3. Cookies and technologies we use

Marketing site (trustpin.cloud)

Vercel Web Analytics and Speed Insights set no cookies and store nothing on your device, so they run without a consent prompt; they cannot be used to single out an individual visitor. Google Analytics 4 sets cookies and loads only after your analytics consent.

Web console (app.trustpin.cloud)

The console uses Auth0 as its authentication provider. The three cookies above are strictly necessary, are set only after you sign in, and each carries a signed JSON Web Token (JWT). All three are HttpOnly and Secure, use SameSite=Lax, and are scoped to path / on app.trustpin.cloud. Because they are strictly necessary, they are not subject to consent.

The console also uses Vercel Web Analytics (Web Analytics only; Speed Insights is not used in the console) for aggregate, cookieless usage measurement. It sets no cookies and does not use identifiers that single out an individual user; data is retained in aggregated form under Vercel’s Web Analytics terms.

4. Managing your choices

On your first visit, a consent banner lets you accept or reject non-essential cookies, which on the marketing site means Google Analytics 4 and preference cookies. You can change or withdraw your choice at any time:

• Use the Cookie Settings link in the footer of any page to reopen the preferences panel.
• Withdrawing consent stops Google Analytics from loading. Cookieless first-party measurement continues, and already-collected aggregated statistics cannot be tied back to you because they are not associated with an identifier.
• You can also control cookies through your browser settings. Blocking strictly-necessary cookies may break parts of the console.

5. Changes to this policy

We may modify this Cookie Policy, in whole or in part, at any time. For material changes we will provide notice at least 30 days before they take effect; non-material changes or changes required by law may take effect immediately. We will update the “Last updated” date above, and when the policy version changes, the consent banner will re-prompt you.

6. Contact