TikFoy. Back to TikFoy

Cookies & device storage

Last updated: 20 October 2026

This page covers storage on tikfoy.app and in the TikFoy app. Our privacy policy explains the related personal-data processing and identifies the operator.

Website cookies

The website uses Laravel session and request-security cookies. These support session continuity, administrator sign-in, and protection against forged requests. They are not used by TikFoy for advertising or cross-site tracking.

  • tikfoy_session: an encrypted reference to the server-side session. The configured session inactivity period is two hours; the browser may remove or expire its cookie sooner.
  • XSRF-TOKEN: a request-security token used to protect state-changing requests. Its lifetime follows the session configuration.
  • Cloudflare security cookies, when issued: Cloudflare may store challenge or bot-protection state, such as cf_clearance, when checking whether a request is legitimate. The cookie's browser expiry shows its actual lifetime. See Cloudflare's cookie descriptions.

The public landing and legal pages do not embed advertising, analytics trackers, social-media widgets, or remotely hosted web fonts. Following a Google Play or other external link opens a service with its own storage practices.

Storage strictly necessary for a service you request or for transmitting communications may be used under section 25(2) TDDDG. Any optional storage that requires consent must wait for that consent. We do not treat visiting this site as consent to optional tracking.

Storage in the app

The app and its SDKs store sign-in credentials or tokens, device keys, installation identifiers, preferences, cached content, notification registration information, subscription state, and advertising consent choices. These support the corresponding app features. Some sensitive authentication and device material uses the operating system's protected storage.

The app includes Google Mobile Ads and its consent interface. Ad requests currently ask for non-personalized ads; this does not mean that Google processes no device information. Where available, open Settings → Ad privacy choices to review the advertising consent interface. Your device settings also provide controls for advertising identifiers and permissions.

Managing storage and permissions

You can clear or block website cookies in your browser. Blocking essential cookies can prevent sign-in and other session features. You can change notification permissions in your device settings, sign out of TikFoy, or clear app storage using your operating system. Clearing storage or uninstalling the app does not delete server-side records or cancel subscriptions.

To request server-side deletion, follow our account deletion instructions. Contact [email protected] with storage or privacy questions.