Cookie Policy
Last Updated: March 2026
This Cookie Policy explains how Tatoma B.V. ("we", "us", or "our") uses cookies and similar technologies on our platform.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember your preferences, and provide information to site owners.
How We Use Cookies
We use strictly necessary cookies, functional cookies, and analytics technologies on our platform:
- Strictly necessary cookies are essential for authentication and security and cannot be disabled
- Functional cookies remember your preferences (such as language and navigation) to improve your experience
- Analytics collect anonymous usage and performance data to help us improve the platform (see below)
We do not use:
- Advertising or marketing cookies
- Third-party social media cookies
Cookies We Use
All Cookies
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
wos-session | WorkOS | Maintains your authenticated session | Strictly necessary | Session |
sb-*-auth-token | Supabase | Stores authentication state for data access | Strictly necessary | Session |
tatoma-cookies-accepted-* | Tatoma | Remembers that you've acknowledged this cookie notice | Strictly necessary | 1 year |
tatoma-locale | Tatoma | Stores your preferred language setting | Functional | 1 year |
tatoma-last-app | Tatoma | Remembers the last application you visited for navigation continuity | Functional | 1 year |
Cookie Details
WorkOS Session Cookie (wos-session)
- Purpose: This cookie is set when you sign in and maintains your authenticated session across our applications. It enables single sign-on (SSO) functionality and ensures you remain logged in as you navigate between pages.
- Type: Strictly necessary
- Duration: Session (deleted when you close your browser) or persistent based on "remember me" selection
- Third Party: WorkOS Privacy Policy
Supabase Authentication Cookies (sb-*-auth-token)
- Purpose: These cookies store your authentication tokens for accessing application data. They enable secure communication between your browser and our database services.
- Type: Strictly necessary
- Duration: Session-based, refreshed automatically while you're active
- Third Party: Supabase Privacy Policy
Cookie Consent Cookie (tatoma-cookies-accepted)
- Purpose: Remembers that you have acknowledged our cookie notice so we don't show it again on subsequent visits. The cookie name includes a version suffix (for example, tatoma-cookies-accepted-v1) so that updates to this policy can trigger a new consent request.
- Type: Strictly necessary
- Duration: 1 year
Language Preference Cookie (tatoma-locale)
- Purpose: Stores your preferred language setting so that the platform displays content in your chosen language across all applications. This cookie is shared across our platform domains to ensure a consistent language experience.
- Type: Functional
- Duration: 1 year
Last Application Cookie (tatoma-last-app)
- Purpose: Remembers the last TATOMA application you visited, allowing us to provide smoother navigation and redirect you to the appropriate application when returning to the platform.
- Type: Functional
- Duration: 1 year
Analytics Technologies
In addition to cookies, we use the following analytics technologies that do not set cookies but collect data via browser beacons:
Vercel Analytics
- Purpose: Collects anonymous page view data (page URL, referrer, browser, operating system, device type, and geography at the country level) to help us understand how the platform is used and identify areas for improvement.
- Type: Analytics
- Cookie-free: This technology does not set or read any cookies. Data is collected via a lightweight script that sends a beacon on each page view.
- Data Handling: Data is anonymised and aggregated. No personal identifiers are collected. Processed by Vercel Inc.
- Third Party: Vercel Privacy Policy
Vercel Speed Insights
- Purpose: Collects anonymous Web Vitals performance metrics (Largest Contentful Paint, First Input Delay, Cumulative Layout Shift, and other Core Web Vitals) to help us monitor and improve page load performance.
- Type: Analytics
- Cookie-free: This technology does not set or read any cookies. Data is collected via a lightweight script that reports performance metrics.
- Data Handling: Data is anonymised and aggregated. No personal identifiers are collected. Processed by Vercel Inc.
- Third Party: Vercel Privacy Policy
Your Choices
Browser Settings
You can control cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored
- Delete individual or all cookies
- Block cookies from specific or all sites
- Set preferences for certain types of cookies
Please note that blocking strictly necessary cookies may prevent our platform from functioning correctly. You may not be able to sign in or access your account if authentication cookies are blocked.
Browser-Specific Instructions
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Privacy, search, and services > Cookies and site permissions
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our platform.
Contact Us
If you have questions about our use of cookies, please contact us:
Email: gdpr@tatoma.eu
Postal Address: Tatoma B.V. Willemstraat 1 5611 HA, Eindhoven The Netherlands