Legal
Cookie Policy
Last updated: 2026-07-06
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are used to remember your preferences, keep you logged in, and help us understand how you interact with our service.
2. Cookies We Use
Tilly uses essential cookies only. We do not use any advertising, analytics, or third-party tracking cookies.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| session | Authentication and session management | 8 hours (inactivity timeout) | Essential |
| csrf_token | Cross-Site Request Forgery protection | Session | Essential |
| remember_token | "Remember me" persistent login | 30 days | Essential |
3. Local Storage
We also use browser localStorage for the following non-cookie purposes:
| Key | Purpose |
|---|---|
| cookie_consent | Records whether you have dismissed the cookie consent banner |
| sidebar_collapsed | Remembers your sidebar state preference |
4. Third-Party Cookies
Tilly does not set any third-party cookies. We do not use:
- Google Analytics or any analytics tracking
- Facebook Pixel or social media trackers
- Advertising or retargeting cookies
- Any other third-party tracking technology
5. Your Cookie Choices
Since we only use essential cookies required for the service to function, there is no opt-out mechanism — these cookies are necessary for security and authentication.
You can control cookies through your browser settings. However, disabling essential cookies may prevent you from logging in or using the service.
6. ePrivacy Directive
Under the EU ePrivacy Directive (Directive 2002/58/EC) and UK Privacy and Electronic Communications Regulations (PECR), strictly necessary cookies do not require consent. All cookies used by Tilly fall into this category.
7. Changes to This Policy
We may update this Cookie Policy if we introduce new cookies or change our cookie practices. The "Last updated" date at the top of this page will reflect any changes.
8. Contact
For questions about our cookie practices, contact our Data Protection Officer at privacy@nescoder.com.
NESCODER LTD, 128 City Road, London, EC1V 2NX, United Kingdom.