Cookie Policy
Which cookies Tiny Desk AI sets, what each one is for, and how to change your choice at any time
Version 1.9 · Last updated 2026-10-21
1. What cookies and similar technologies are
A cookie is a small text file that a website asks your browser to store on your device. On each later request the browser sends it back, which is how a site can remember which language you picked, or that you are signed in.
"Similar technologies" covers anything else that stores or reads information on your device, or that identifies your browser without storing anything, such as local storage or a script that measures page views. We use the phrase throughout this policy because some of the analytics tools listed below work without setting any cookie at all, and the law still applies to what they do.
This policy covers tinydeskai.me. It does not cover the sites we link to, or the pages our payment provider hosts on its own domains.
2. The cookies we set
The tables below list the cookies Tiny Desk AI sets directly, together with the analytics cookies our providers set on our instructions. They are not an exhaustive list of everything a third party may set: where a provider sets further cookies of its own, we say so and link to that provider's documentation rather than reproduce a list we have not verified.
Which of these you actually get depends on what you do on the site and on which features are switched on: you will not receive a session cookie unless you sign in, and whether you receive an analytics cookie depends on where you are and on your choice: section 4 sets out the rule.
Set by Tiny Desk AI
| Name | Category | What it is for | How long it lasts |
|---|---|---|---|
PARAGLIDE_LOCALE | Strictly necessary | Records the language you chose, so that pages load in that language on your next visit | 400 days |
cookie_consent | Strictly necessary | Records your cookie choice: the version of the notice, whether you allowed the analytics category, and when you decided. It is what stops the banner appearing again, and what the site checks before loading any analytics script | 365 days |
sidebar_state | Strictly necessary | Written when you expand or collapse the sidebar on a desktop-sized screen. It is not currently read back: the sidebar always loads collapsed | 7 days |
better-auth.session_token | Strictly necessary | This cookie holds your session token and is what keeps you signed in between requests. Over HTTPS the browser receives it under the name __Secure-better-auth.session_token; the __Secure- prefix is added in production and is absent only on plain-HTTP local development | 7 days |
better-auth.session_data | Strictly necessary | This cookie is a short-lived cache of your session, used so that the service does not have to query the database on every single request | 1 hour |
We also keep a few values in your browser's local and session storage, none of them an identifier: when the purchase and exit offers were last shown or dismissed and when you last started a checkout, so the offers do not keep reappearing; your light or dark theme choice, where the theme switch is on; and a one-off marker that reloads the page once after we release a new version.
Set by our analytics providers
Where the law requires prior consent (the European Economic Area, the United Kingdom and Switzerland, or anywhere we cannot tell where you are), these are only set after you consent to the analytics category. Everywhere else they are set by default, and stop as soon as you switch the analytics category off with the "Cookie preferences" link. In both cases they are only set if that particular tool is configured for this site.
| Name | Category | What it is for | How long it lasts | Set by |
|---|---|---|---|---|
_ga | Analytics | Distinguishes one visitor from another | 2 years | Google Analytics 4 |
_ga_<container-id> | Analytics | Keeps the state of the current analytics session | 2 years | Google Analytics 4 |
_clck | Analytics | Keeps a Clarity user identifier and your preferences for this site, so that repeat visits are attributed to the same user | Not published by the provider | Microsoft Clarity |
_clsk | Analytics | Links several page views by the same user into a single Clarity session recording | Not published by the provider | Microsoft Clarity |
Two notes on that second table.
Microsoft does not publish an expiry for _clck or _clsk in its own cookie
documentation, so we do not state one. Figures circulating elsewhere are not
confirmed by Microsoft. Clarity may also set further identifier cookies that
it shares with other Microsoft services; Microsoft lists them at
learn.microsoft.com/clarity/clarity-cookies,
and we point you there rather than reproduce a list we have not verified
ourselves.
Cookieless measurement
Where they are enabled for this site, these analytics tools measure page views without writing anything to your device (no cookie, no cache entry, no local storage) and without a persistent identifier:
| Tool | What it reports | Where it runs |
|---|---|---|
| Plausible | Pages viewed, referrer, browser, operating system, device type and an approximate country | Our own instance of the open-source software, on a server we rent in the United States, so the company that publishes Plausible receives none of this data. Section 7 of the Privacy Policy names the company that hosts that server |
| Umami | Pages viewed, referrer, browser, operating system, device type and an approximate country | The Umami instance configured for this site |
| Cloudflare Web Analytics | Page path, referrer, approximate country, device type, browser, operating system and page-speed measurements | Our CDN provider. Where it is switched on, it runs on every page, including the embedded tools served under /embeds. Cloudflare states that its beacon uses no client-side state and does not fingerprint you |
Your IP address is used to work out an approximate country and is then discarded; neither tool builds a profile of you or follows you to another site. Because nothing is stored on or read from your device, the consent rules for cookies do not reach them, and they run on our legitimate interest in knowing which pages are used and how quickly they load.
The analytics toggle does not control cookieless measurement. It governs only the cookie-setting providers in the table above, so declining, opting out or never answering the banner leaves cookieless measurement running. If you object to it, a browser-level content blocker will stop it, and you can write to support@fishwiththemoon.uk to exercise your right to object under Article 21 of the UK GDPR.
Cookies we do not control
This policy covers what happens on tinydeskai.me. It does not cover cookies set on a third-party site we link to, or any further cookie a provider named above sets beyond the ones listed here. Those are governed by that party's own cookie and privacy policies, not by this one.
Checkout and the customer portal are one such case: our payment provider hosts them on its own domains, and any cookie set there is set by that provider under its own policies.
3. The categories we use
Strictly necessary
These make the site work: remembering your language, remembering your cookie choice itself, keeping you signed in. They do not track you, and they are not used for advertising.
They cannot be switched off through the banner, because without them the service cannot do what you asked it to do. You can still block them in your browser, but parts of the site will stop working.
Analytics
These tell us which pages are used and where people get stuck, so we can improve the product. The providers in this category set cookies. Where consent is required (the European Economic Area, the United Kingdom, Switzerland, or a location we cannot determine), they are only loaded after you consent, and never before the banner has been answered. In other regions they load by default, and you can switch them off at any time.
Cookieless measurement is not controlled by this choice; see section 2.
You can withdraw this consent at any time; see section 4.
Marketing
These would be set by advertising partners to build a profile of your interests and to measure advertising campaigns across sites.
This site does not use them. No advertising or remarketing technology is installed. If that ever changes, this policy and the consent banner will be updated first, and we will ask for your consent before any such cookie is set.
4. How to manage your choices
The banner. If you are in the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, your first visit asks you to accept or reject the analytics category, or to open the preferences dialog and choose per category. The reject button carries the same visual weight and takes the same single click as the accept button, and nothing in the analytics category is loaded until you have chosen. We read your approximate country from the request once, on the first page load, and do not store it. Elsewhere no banner is shown and the analytics category is on until you switch it off. The banner appears only where a cookie-setting analytics provider is configured; a site running only cookieless measurement has nothing to ask you and shows no banner.
The "Cookie preferences" link. Where analytics is in use on this site, a "Cookie preferences" link is available on every page: at the bottom of the footer on our public pages, and at the bottom of the page on pages that have no footer, such as the sign-in and account pages. It is shown in every region. Use it to change your mind, to opt out where analytics is on by default, or to withdraw consent entirely, at any time, without contacting us. When you withdraw consent, the page reloads so that any analytics script already running is stopped, and the analytics cookies we know about are removed.
Your browser. Every major browser lets you block or delete cookies: Chrome, Firefox, Safari and Edge. Blocking strictly necessary cookies will break sign-in and other basic functions.
Opting out at the provider. Independently of the choice you make here:
- Google Analytics offers a browser add-on that opts you out on every site: tools.google.com/dlpage/gaoptout.
- Microsoft Clarity is covered by the Microsoft privacy statement, which explains the controls Microsoft offers: privacy.microsoft.com.
- Cookieless measurement (Plausible, Umami, Cloudflare Web Analytics) is not controlled by this choice; see section 2.
5. If you say no to analytics
Nothing breaks. Every feature of Tiny Desk AI works exactly the same whether analytics is on or off. We do not restrict content, degrade the service, or keep asking. The only difference is that no analytics cookie is placed on your device and your visit is not counted by the cookie-setting providers. Cookieless measurement is not controlled by this choice; see section 2.
6. Changes and contact
We update this policy whenever the set of cookies changes. Where a change is material we will ask for your consent again through the banner. The version number and date at the top of this page tell you which text is currently in force.
For anything about cookies, or about privacy generally, write to support@fishwiththemoon.uk. Our full privacy notice is the Privacy Policy.
FISH WITH THE MOON LTD Office 15727 Initial Business Centre, Unit 7 Wilson Business Park, Manchester, United Kingdom, M40 8WN