1. Categories
- Strictly necessary — sign-in, security and remembering your consent choice. These run on legitimate interest and cannot be switched off.
- Analytics — Google Analytics 4 with Consent Mode. Off until you allow it.
- Marketing — advertising or remarketing tags. None are in use today; the switch exists so nothing can ever load without your consent.
2. What we set
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
| sb-<project>-auth-token | Strictly necessary | Keeps you signed in to your TWIX account. | Until sign-out or expiry |
| twix-cookie-consent-v2 | Strictly necessary | Stores your cookie choices so we do not ask again. | 12 months |
| twix-client-id | Strictly necessary | Random identifier attached to your consent record as proof of consent. | 12 months |
| _ga, _ga_<id> | Analytics | Google Analytics 4 — anonymous visit and page statistics. Only set after you allow analytics. | Up to 24 months |
| Marketing tags | Marketing | None are currently used. If we ever add advertising tags they will load only with your consent. | n/a |
3. Changing or withdrawing consent
Your choice is stored in your browser and an auditable copy is kept in our database (date, version of this policy, categories allowed). Withdrawing is as easy as consenting.
4. Legal basis
Consent under GDPR/ePrivacy (EU/UK), consent for non-essential cookies under PIPA (Korea), and an opt-out of sale/sharing under CPRA (California). TWIX does not sell or share personal information for cross-context behavioural advertising.