Cookie notice
Last updated October 7, 2026
Cookies are small files a website saves in your browser. This notice explains the ones Tumbly uses. It's part of our privacy policy.
The short version: the parts of Tumbly kids use (the apps, the web player and the back-seat screen at tumbly.ai/t) use only what's needed to keep you signed in and remember settings. No advertising cookies anywhere. Our marketing pages use analytics cookies unless your browser sends Do Not Track or Global Privacy Control.
Strictly necessary
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| better-auth.session_token (and related) | tumbly.ai | Keeps a parent or guest signed in to the web app | Up to 60 days |
| App storage (secure storage, local storage) | Tumbly apps | Session, chosen kid profile, settings, downloaded stories | Until you sign out or delete the app |
| Cloudflare security cookies (for example __cf_bm) | Cloudflare | Blocks bots and attacks | Up to 30 minutes |
Analytics (marketing pages only)
On tumbly.ai's marketing pages (not the web player or the back-seat screen) we use these to understand which pages help parents. They're not used for advertising.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| ph_*_posthog | PostHog | Counts visits and clicks with a random ID | 1 year |
| _ga, _ga_* | Google Analytics | Counts visits with a random ID; IP addresses are anonymized | Up to 14 months |
Google Analytics has advertising features (Google signals, ad personalization) turned off for Tumbly.
Your choices
- Turn on Global Privacy Control or Do Not Track in your browser, and our site won't load analytics at all.
- Block or delete cookies in your browser settings. The site still works; you may need to sign in again.
- Questions: privacy@tumbly.ai.