In short
- The public website sets no cookies of its own and uses no analytics or advertising trackers.
- After you sign in to the TuniCall application, one strictly necessary session cookie keeps you signed in for up to 12 hours.
- The contact form and the sign-in page use Cloudflare Turnstile, a security check that may use its own technical storage.
- Because we only use strictly necessary technologies, we do not show a cookie banner. You can still block or delete cookies in your browser.
1. Our approach
This policy explains which cookies and similar technologies are used on the TuniCall website and in the TuniCall application, why, and how you can control them. It complements our privacy policy.
We use only what is strictly necessary to provide the website and the service you ask for and to keep them secure. We do not use cookies or similar technologies for analytics, advertising, profiling or tracking across websites.
2. What cookies and similar technologies are
A cookie is a small text file that a website stores in your browser and that is sent back to the website with later requests. Similar technologies include the browser’s local storage, which lets a website keep small pieces of information on your device, and scripts or frames from other services that can read or store information in your browser.
A “first-party” technology is set by the website you are visiting. A “third-party” technology is set by another service used on that website.
3. What we use
| Name | Set by | Where | Purpose | Duration | Type |
|---|---|---|---|---|---|
| linea_automation_session | TuniCall (first party) | Set when you sign in to the TuniCall application | Keeps you signed in and authenticates your requests. It contains a random token, not your password or personal details. | 12 hours, or until you sign out | Cookie, strictly necessary |
| Turnstile security check | Cloudflare (third party) | The website contact form and the application sign-in page, when the check is shown | Tells people apart from automated abuse before a message or a sign-in is accepted | Set and managed by Cloudflare | Third-party frame and storage, strictly necessary for security |
| linea-main-page, linea-automation-tab, linea-configuration-guide | TuniCall (first party) | The TuniCall application, after sign-in | Remember the last page, tab and setup guide you opened, so the application reopens where you left it. They contain no personal data and are never sent to our servers. | Until you clear your browser storage | Local storage, strictly necessary for the interface you use |
Apart from the security check on the contact form, the public pages of this website do not set or use any of these technologies.
4. The session cookie
When you sign in to the TuniCall application, our server creates a session and sends your browser the linea_automation_session cookie. Its name reflects the internal name of the platform. The cookie:
- contains only a random token; our database stores a hash of that token, never the token itself;
- is HTTP-only, so scripts in the page cannot read it, is sent only over secure HTTPS connections in production, and is same-site strict, so other websites cannot use it to make requests on your behalf;
- expires after 12 hours and is deleted when you sign out. Changing your password ends your other sessions, and an administrator who deactivates your account ends all of your sessions at once.
Without this cookie, you cannot stay signed in to the application.
5. Cloudflare Turnstile
The contact form and the sign-in page use Cloudflare Turnstile to protect them against spam and automated attacks. The check runs in a frame loaded from Cloudflare (challenges.cloudflare.com) only on those pages and only when the check is needed.
To perform the check, Cloudflare processes technical information about your browser, device and connection, and may use cookies or similar storage within its frame. Their names and lifetimes are set by Cloudflare and may change. We do not have access to them and we use Turnstile only for security, never for analytics or advertising. We receive only the result of the check. Cloudflare’s own privacy information describes the data it processes.
6. What we do not use
- No analytics or audience measurement cookies.
- No advertising, retargeting or social media cookies or pixels.
- No embedded content from third parties, such as videos, maps or social media posts, that could set their own cookies.
- No third-party fonts: our fonts are served from our own servers.
- No technology that tracks you across other websites.
7. Connections to your organisation’s providers
If your organisation uses the browser phone in the TuniCall application, your browser connects directly to your organisation’s telephony provider (Twilio) to carry call audio, after asking for access to your microphone. That connection is made under the agreement between your organisation and its provider, and that provider’s software may exchange technical data about the call with the provider. It is not used by TuniCall for analytics or advertising.
8. Why there is no cookie banner
The rules on cookies, such as the EU ePrivacy Directive and the national laws that implement it, require consent for cookies and similar technologies, except for those that are strictly necessary to provide a service explicitly requested by the user or to carry out the transmission of a communication. Everything listed in this policy falls within that exception: it keeps you signed in, protects forms and sign-in against abuse, or makes the application you asked for work as expected.
For this reason, we do not ask for your consent and do not show a cookie banner. If we ever want to use a technology that requires consent, we will ask for it first, and you will be able to refuse it or withdraw it at any time.
9. How to control cookies
You can control cookies and local storage in your browser settings. Most browsers let you:
- see and delete the cookies and site data stored on your device;
- block all cookies, or only third-party cookies;
- delete cookies and site data automatically when you close the browser.
The help pages of your browser explain how to do this. Please note that:
- if you block or delete the session cookie, you will be signed out and will not be able to stay signed in to the application;
- if you block Cloudflare’s frame or storage, the security check may fail, and you may not be able to send the contact form or sign in. You can then use the other contact details in our legal notice, where available;
- if you clear local storage, the application will simply open on its default page.
10. Changes to this policy
We will update this policy if we change the technologies we use. The “last updated” date at the top of this page shows the current version.
Questions about this document? Contact us through our contact form.