Cookie Policy

Last updated: September 30, 2026

UseTimio uses very few cookies, and none of them follow you around the internet. This page lists every one, plus the things we keep in your browser’s local storage, which are not cookies but are worth being honest about.

1. Strictly necessary

Without these the product cannot work — you could not stay signed in. They are set on the basis of necessity rather than consent, and cannot be switched off while you use the service.

Name	Type	What it does	How long it lasts
`organization_token`	Cookie	Keeps a signed-in member or admin signed in to their workspace. HTTP-only, so page scripts cannot read it.	Session / bounded lifetime
`admin_token`	Cookie	The equivalent session for our internal super-admin console. Never set on a customer account.	Session / bounded lifetime
`active-workspace`	Cookie	Remembers which organization you are working in, so links resolve to the right workspace when you use more than one.	Until you switch workspace or sign out
Bot protection	Cookie	Cloudflare Turnstile may set a short-lived token when you submit a public form, to confirm you are not a bot.	Minutes

2. Functional and preference storage

These live in your browser rather than on our servers. They hold a preference or a queued action, not an identity, and clearing your browser data removes them.

Name	Type	What it does	How long it lasts
`theme`	Local storage	Remembers light or dark mode inside the app.	Until cleared
`affiliate_ref`	Local storage	Records the referral code you arrived with, so the right partner is credited if you subscribe.	Until cleared
`promo_banner_dismissed`	Session storage	Stops a promotional banner reappearing after you close it.	Until the tab is closed
`uo_preloaded`	Session storage	Notes that the intro animation has already played, so it does not replay on every page.	Until the tab is closed
Offline check-in queue	Service worker cache	Holds check-ins made while offline on the device until they can be synced.	Until synced
`timio_attr`	Cookie	Remembers which ad or link brought you to our public site (the campaign tags in the link), so we know which campaigns lead to signups. Read only by our own servers.	30 days
`timio_ad_consent`	Cookie	Remembers your answer to the advertising cookie question, so we do not ask again.	180 days

3. Analytics

Analytics run on the public marketing site so we can see which pages are useful. They do not run against your attendance data, and they never receive member records.

Name	Type	What it does	How long it lasts
Umami	No cookie	Counts page views and referrers without cookies or cross-site identifiers.	Not stored on your device
`_ga`	Cookie	Google Analytics, where enabled on the marketing site: distinguishes visitors to measure traffic.	Up to 2 years
`_ga_*`	Cookie	Google Analytics: maintains session state for the property.	Up to 2 years

4. Advertising measurement, and what we do not use

We advertise on Facebook and Instagram. On our public pages and the account owner's dashboard we ask before loading the Meta Pixel, and it loads only if you tap Accept. It never runs on workers' check-in pages or inside a workspace's admin portal.

Name	Type	What it does	How long it lasts
`_fbp`	Cookie	Meta Pixel, only after you tap Accept: tells Meta that a visit came from this browser, so we can see which Facebook and Instagram ads work.	90 days
`_fbc`	Cookie	Holds the click id when you arrive from one of our Meta ads, so the signup can be matched to that ad. Not set when you tap No thanks.	90 days

When an account owner signs up, starts using the product, or pays for a plan, our server tells Meta so we can measure which ads worked. That message carries the owner's email address and phone number in hashed form, never workers' or members' data. Tap No thanks and we send nothing about you.

No advertising cookies without your say.
No tracking of workers or members, and nothing from attendance records ever goes to an ad platform.
No sale of browsing or personal data.
No cookies at all inside the authenticated product beyond the session and workspace ones above.

5. Controlling cookies

Every browser lets you view, block and delete cookies and clear local storage — usually under Privacy or Site settings. Blocking strictly necessary cookies will sign you out and prevent check-in from working. You can also opt out of Google Analytics across all sites with Google’s browser add-on. The Meta Pixel is the one thing we ask about first. To change your answer, clear the timio_ad_consent cookie and we will ask again. If your jurisdiction requires a consent banner for your own visitors, that obligation applies to your site, not to your use of UseTimio.

6. Related documents

For the wider picture of what we collect and why, read Data Safety and the Privacy Policy.

Who to contact

Spent Digital Lab Limited operates UseTimio. Write to info@usetimio.com with “Legal”, “Privacy” or “Security” in the subject line and it reaches the right person. Post reaches us at 3 Idishin Street, Surulere, Ondo, Ondo State, Nigeria; the phone line is +234 902 346 6899.

This document describes how UseTimio works and the commitments we make. It is not legal advice. Organizations with specific regulatory obligations should have it reviewed by their own counsel.