Cookie Policy
Effective Date: Sep 1, 2026
This Cookie Policy explains how Tembo Data Systems, Inc. ("Tembo", "we", "us", or "our") uses cookies and similar tracking technologies when you visit our websites and use our services (collectively, the "Services"). This policy should be read alongside our Privacy Policy.
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and supply information to site owners. Cookies may be set by the website you are visiting ("first-party cookies") or by third parties whose services the website uses ("third-party cookies").
2. Types of Cookies We Use
We use the following categories of cookies on our Services:
a. Strictly Necessary Cookies
These cookies are essential for the operation of our Services. They enable core functionality such as authentication, security, and session management. Without these cookies, the Services cannot function properly. Because they are strictly necessary, these cookies do not require your consent under applicable law.
- Authentication cookies– Maintain your signed-in state and session (provided by Clerk)
- Security cookies– Help detect and prevent fraudulent activity and protect the security of your account
- Consent preference– Remembers whether you allowed all non-essential cookies, allowed analytics or advertising independently, or rejected them
- Privacy region– Applies the appropriate cookie controls based on the country associated with your request
- Global Privacy Control preference– Communicates a GPC signal from the edge of our site to its cookie controls
b. Analytics and Performance Cookies
These cookies help us understand how visitors interact with our Services by collecting and reporting information about usage patterns. Outside the United States, we activate these cookies only after you consent. In the United States, analytics are active by default and can be disabled using our cookie controls.
- PostHog– Product analytics to understand feature usage and improve the Services
c. Advertising Cookies
These cookies measure campaigns, personalize advertising, and help us understand which ads lead visitors to our Services. Outside the United States, we activate them only after you consent. In the United States, they are active by default unless you opt out or send a Global Privacy Control signal.
- Google Ads and Google Tag Manager– Advertising measurement, attribution, and management of consent-approved tags
- Meta Pixel– Advertising measurement and campaign attribution
- LinkedIn Insight– Advertising measurement and campaign attribution
- OpenAI Pixel– Advertising measurement and campaign attribution
3. Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We do not control how these third parties use their cookies. The third-party services we use that may set cookies include:
- Clerk– Authentication and user management
- PostHog– Product analytics
- LinkedIn Ads– Advertising measurement and campaign attribution
- Google– Advertising measurement and tag management
- Meta– Advertising measurement and campaign attribution
- OpenAI– Advertising measurement and campaign attribution
Please refer to each provider's own privacy and cookie policies for details on their use of cookies.
Cookie and identifier inventory
The cookies and similar identifiers below may be used depending on your location, choices, and the services configured on the page. Vendor-controlled names and durations may change.
| Provider and category | Name | Duration | Domain | Purpose |
|---|---|---|---|---|
| Tembo – Necessary | tembo_cookie_consent | 12 months | www.tembo.io (host-only) | Stores analytics and advertising choices |
| Tembo – Necessary | tembo_privacy_region | 24 hours | www.tembo.io (host-only) | Applies regional consent defaults |
| Tembo – Necessary | tembo_gpc | Up to 12 months for an opt-out; 24 hours when no signal is present | www.tembo.io (host-only) | Preserves a Global Privacy Control signal |
| Tembo – Advertising | __tembo_utm | 30 days | www.tembo.io (host-only) | Stores first-touch campaign and click attribution |
| PostHog – Analytics | ph_<project-token>_posthog | Up to 12 months | www.tembo.io (host-only) | Persists full-consent analytics state; GPC and analytics-only mode use no persistent PostHog identifier |
| Google Analytics – Analytics | _ga, _ga_*, _gid, _gat* | 1 minute to 2 years | www.tembo.io (host-only) | Measures site usage when full analytics are enabled |
| Google Ads – Advertising | _gcl_*, _gac_*, FPGCL*, __gads, __gpi, __gpi_optout | Up to 13 months | www.tembo.io, Google, and DoubleClick domains | Advertising measurement and conversion attribution |
| Meta – Advertising | _fbp, _fbc, fr | Up to 90 days | www.tembo.io and facebook.com | Advertising measurement and conversion attribution |
| LinkedIn – Advertising | li_fat_id, ln_or, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory, li_sugr | 24 hours to 2 years | www.tembo.io and linkedin.com | Advertising measurement, matching, and campaign attribution |
| OpenAI – Advertising | Pixel and browser/device identifiers (vendor-controlled) | Vendor-controlled | www.tembo.io and OpenAI domains | Advertising measurement and campaign attribution |
4. Your Rights Under GDPR and Applicable Law
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have specific rights regarding cookies under the General Data Protection Regulation (GDPR), the ePrivacy Directive, and related local data protection laws:
- Right to consent: We will obtain your consent before placing non-essential cookies on your device, where required by law.
- Right to withdraw consent: You may withdraw your consent to non-essential cookies at any time using the cookie settings control on this page or in the site footer.
- Right to information: You have the right to be informed about the cookies we use and their purposes, which this policy provides.
United States right to opt out of sale or sharing
We do not sell personal information for money. Our use of advertising technologies may be considered a sale or sharing of identifiers and internet activity under California and similar state privacy laws. You can opt out at any time by using the "Your privacy choices" control, turning Advertising off, or enabling Global Privacy Control.
5. How to Manage Cookies
You can control and manage cookies in several ways. Please note that removing or blocking cookies may impact your user experience and some functionality may no longer be available.
Regional Defaults
Visitors outside the United States, and visitors whose location cannot be determined, must accept non-essential cookies before they are activated. For visitors in the United States, analytics and advertising cookies are active by default, subject to your cookie controls and applicable law. You can reject non-essential cookies at any time using the control above or the "Your privacy choices" control in the site footer.
Global Privacy Control
We recognize Global Privacy Control (GPC) signals. When we receive a GPC signal from a United States visitor, we disable advertising cookies and technologies used for sale or sharing as those terms are defined by applicable privacy law. Limited pageview analytics remain active without URL query strings or persistent PostHog identifiers. Autocapture, heatmaps, session recording, person profiles, and page-leave capture are disabled unless you allow all non-essential cookies. You can reject limited analytics using the cookie controls. We preserve a detected GPC opt-out on that browser for up to 12 months and keep advertising controls locked off during that period.
Browser Settings
Most browsers allow you to view, manage, delete, and block cookies for a website. Be aware that if you delete all cookies, any preferences you have set will be lost, including the ability to opt out of cookies, as this function itself requires placement of an opt-out cookie on your device. Guidance on how to manage cookies in popular browsers can be found at:
Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. At this time, we do not respond to DNT signals, which are separate from Global Privacy Control. We do honor GPC as described above, and you may use the cookie management options described above to manage your preferences.
6. Data Retention
Cookies have varying lifetimes depending on their type. Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or you delete them. Analytics cookies are typically retained for up to 12 months. Authentication cookies are maintained for the duration of your active session or until you sign out.
7. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically.
8. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us at: privacy@tembo.io
For more information about how we handle your personal data, please see our Privacy Policy. For details on how we process personal data on behalf of customers, please see our Data Processing Addendum.