Privacy policy

Last updated 27 October 2026

TidyCookies is a service by F4 Labs. This page explains what we store, for you as a customer and for the visitors of websites that use TidyCookies.

If you have an account

F4 Labs is the data controller for your account data:

• Your email address, used to log you in and to send you messages about your account.
• The websites you add and your banner settings.
• Billing details. Payments are handled by Stripe; we never see your full card number.

We keep this while you have an account, and billing records as long as accounting law requires. We do not sell your data or send you marketing without asking.

Visitors of websites that use TidyCookies

When a visitor makes a cookie choice, we save proof of that choice for the website owner, who is the data controller. F4 Labs is their data processor. We store:

• A random consent ID, the date and time, and which cookie categories were accepted.
• The page address, language, browser type and country.
• A shortened IP address (the last part is removed, so it can't point to one device).

The choice is also saved in the visitor's own browser in a necessary cookie called cs_consent, so the banner doesn't ask again. Consent records are deleted automatically after 5 years.

Where data is stored

TidyCookies runs on Cloudflare. Email is sent with Resend and payments are handled by Stripe. These are our subprocessors. Where data leaves the EU/EEA, it is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Our own cookies

Our dashboard uses one necessary cookie, cs_session, to keep you logged in. We use no tracking or advertising cookies.

Your rights

You can ask to see, correct or delete your data, and you can complain to your data protection authority. Website visitors who want their consent record deleted can contact the website owner or us. Write to support@tidycookies.com.