Cookie Policy

This Cookie Policy explains how TRESSO uses cookies and similar technologies on the TRESSO website. TRESSO is primarily a desktop software product. Most core product functionality occurs locally on the user's machine and does not depend on browser cookies.

This policy reflects what the TRESSO website actually does. The site sets one cookie for customers, and only when you sign in to your account. It does not use analytics, advertising or marketing cookies, it does not track you across other websites or build an advertising profile, and it stores nothing else in your browser — no local storage, no session storage, no other cookie. There is no cookie consent banner, because there is nothing non-essential to consent to. If that ever changes we will ask first — we will not treat your continued use of the site as agreement.

TRESSO does keep simple counts on its own servers of how often a download or a checkout is started — totals only. They are not tied to you, to a browser, to a campaign or to a referring site, and no cookie or browser storage is involved in producing them.

Cookies are small text files stored on your device by websites and online services. Cookies are commonly used to maintain sessions, improve usability, remember preferences, support checkout functionality, measure website performance, and improve reliability and security.

tresso_acct - account sign-in. Strictly necessary. It is the only cookie TRESSO sets for customers. It is set only when you sign in on the account page, and it is what keeps you signed in. Browsing the marketing pages sets no cookie at all, and nothing is written to your browser's local or session storage on any page.

• What it contains: an opaque public license identifier and an expiry time, protected by a cryptographic signature.
• What it does not contain: your email address, your license key, your Stripe or payment identifiers, any advertising identifier, and any record of your browsing or behavior.
• Lifetime: 7 days, after which you sign in again. It persists after the browser is closed so you are not signed out between visits.
• Protections: HttpOnly, so page scripts cannot read it; Secure in production, so it is sent only over HTTPS; and SameSite=Lax.

Being strictly necessary, it does not require consent - it is what provides the service you asked for. If you block it you can still browse the site, but you cannot stay signed in to the account page.

No analytics, advertising, or marketing cookies. The TRESSO website does not use analytics cookies, advertising cookies, tag managers, pixels, or session-replay tools. If we ever introduce an optional cookie, this policy will be updated first and it will not load until you have agreed to it.

Staff-only security cookies. The TRESSO Owner/Admin Portal - the internal console TRESSO staff use to operate the service - uses two authentication cookies, tresso_admin_session and tresso_admin_csrf. These are not customer cookies. They are issued only to an authenticated TRESSO staff account signing in to that internal console, are never set on a customer's browser, and are not present in the TRESSO desktop application. They exist for sign-in and cross-site request forgery protection only, and are listed here for completeness rather than because they affect you.

Legacy. An older staff cookie, tresso_admin, is no longer set by anything. It is only cleared, so any copy left in a staff browser from before is removed rather than reused.

TRESSO does not operate a behavioral advertising network and does not sell browsing activity to advertising marketplaces or data brokers.

There is no cookie consent banner on this site. One strictly necessary cookie is set, only after you sign in, and a strictly necessary cookie does not require consent - so a banner would collect a preference about nothing. Any future non-essential cookie or third-party request would stay off until you agreed to it, and declining would leave the site fully usable.

Most browsers allow users to block cookies, delete stored cookies, restrict tracking technologies, and adjust privacy settings. Disabling certain cookies may impact portions of website functionality.

Three third-party services are used by the TRESSO website. Each is named here specifically; TRESSO uses no other third-party service on its web pages.

• Stripe - payment and checkout. Purchases are completed on Stripe's own hosted checkout page. Stripe may set cookies or use related technologies on Stripe's own domain during payment, under Stripe's privacy policy. TRESSO does not embed Stripe tracking on TRESSO pages and does not control Stripe's cookies.
• Google Identity Services - account sign-in. The account page offers "Continue with Google". Choosing it loads Google's sign-in library and communicates with Google, and Google may operate its own cookies and services on Google's domains under Google's privacy policy. Those are Google's cookies, governed by Google; they are not TRESSO analytics or tracking cookies. TRESSO receives only a verified sign-in result and uses it to identify your existing TRESSO license.
• Google Fonts - font delivery. Our pages load a web font from Google's font service. Google Fonts does not set cookies; the request does send your IP address and browser to Google, as any request to any server does.

Apart from the Google sign-in button on the account page, TRESSO uses no analytics providers, advertising networks, session-recording tools, or embedded third-party content and widgets on its web pages.

This Cookie Policy may be updated periodically. Continued use of the TRESSO website after updates become effective constitutes acceptance of the revised policy.

Questions regarding this Cookie Policy may be sent to support@tressohq.com.