Last updated: September 25, 2026
Cookies and browser local storage are small pieces of data that a website can save on your device. They let a site remember things between page loads — for example, that you are signed in. The two technologies are similar but not identical: cookies are sent with every HTTP request to the same site, while local storage stays in the browser and is read by JavaScript when the page needs it.
Transkripsie uses browser storage to run the service and, if you opt in, to recognise returning visitors to our public website. We count visits to our public pages without storing anything on your device. We do not use advertising or cross-site tracking cookies. Optional analytics are off until you switch them on.
These entries are needed to sign you in, keep your account safe, and remember your cookie choice. They cannot be switched off.
| Name | Purpose | Storage | Duration |
|---|---|---|---|
| token | JWT access token used to authenticate API requests. | sessionStorage (this browser tab only) | Until the tab closes or you sign out; expires after 15 minutes |
| __Secure-tk_refresh | Lets you stay signed in by issuing new access tokens. Scripts on the page cannot read it. | Cookie (HttpOnly, Secure, SameSite=Strict, sent only to our sign-in API) | 14 days, renewed on each use (at most 60 days in total); until you close the browser if "Stay logged in" is off |
| __Secure-tk_device | Signed proof that this browser already completed a sign-in to your account, so failed password guesses from elsewhere cannot lock you out. Scripts on the page cannot read it. | Cookie (HttpOnly, Secure, SameSite=Strict, sent only to our sign-in API) | 30 days after your last sign-in on this browser |
| csrf_token | Anti-CSRF token that protects state-changing requests from being forged by another site. | httpOnly cookie (when set) | Session |
| device_fp | Hashed device fingerprint used to detect sign-ins from a new device and trigger MFA. | localStorage | Persistent until cleared |
| cookie_consent | Records your cookie choice (including whether optional analytics are on) so we don't ask on every visit. | localStorage | Persistent until cleared or policy version bumps |
Our own first-party tool counts every visit to our public pages (home, pricing, legal and help pages — never inside the app, your recordings, or shared links). For this it stores nothing on your device: no cookies, no local or session storage, and no device identifier. To tell visitors apart, our server combines your IP address and browser user-agent with a random value that is replaced every day and turns them into a short code (a one-way hash) that can't be reversed. The same code is used only for that day, so we can count a visit of several pages as one visit but can't recognise you the next day. We do not store your IP address. This happens for every visitor, including if you choose “Reject optional” or your browser sends a Global Privacy Control signal. See Privacy Policy — Website visit statistics for exactly what is recorded.
If you turn on the Analytics switch and choose Save choices in the cookie notice, we also keep the entries below, so we can recognise you as a returning visitor and see which source first brought you to us, and, if we have enabled it, run PostHog. You can switch them off again at any time with the button in Section 4. If your browser sends a Global Privacy Control signal, we treat that as “no”.
| Name | Purpose | Storage | Duration |
|---|---|---|---|
| tk_sid | Random ID for the current visit (a new one starts after 30 minutes of inactivity). | sessionStorage | Until the tab is closed |
| tk_vid | Random visitor ID so our own statistics can tell new visitors from returning ones. | localStorage | Until you withdraw consent or clear site data |
| tk_attr | How your first visit started (landing page, referring site, campaign tags), so a request for early access can be credited to the right source. | sessionStorage + localStorage | Until you withdraw consent or clear site data |
| ph_*, __ph_opt_in_out_* | Only if we have enabled PostHog: product analytics and session replay on public pages other than sign-in and sign-up, with everything you type masked, also where a page shows it back to you. Loaded from our own domain and sent to PostHog's US Cloud, in the United States. | Cookie + localStorage | Up to 1 year |
The strictly necessary entries (Section 2.1) are required to use the service. The basic visit statistics (Section 2.2) store nothing on your device and are limited to our public pages. You can object to them at any time by emailing privacy@transkripsie.com or by blocking scripts for our site in your browser. Optional analytics (Section 2.3) are off unless you turn them on, and you can change your mind here:
You can remove everything Transkripsie has stored in your browser at any time:
transkripsie.com. In Chrome and Edge: Settings → Privacy and security → Site settings → View permissions and data stored across sites. In Safari: Settings → Privacy → Manage Website Data. In Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data.cookie_consent entry will make this notice appear again on your next visit. Withdrawing analytics consent stops optional analytics immediately and removes our own analytics entries from this browser; clear site data to also remove anything PostHog stored.If you have any questions about how we use cookies and local storage, contact us at support@transkripsie.com.