Cookie Policy
1About This Policy
This Cookie Policy explains how Tierlane uses cookies and similar technologies (such as local storage and pixel tags) on our two web surfaces: the marketing website at tierlane.app and the embedded Shopify admin application at app.tierlane.app. It supplements our Privacy Policy at tierlane.app/privacy and is incorporated into it by reference.
For broader information about how we collect and use personal information — including who we are, your rights, and how to contact us — please read the Privacy Policy.
"Tierlane", "we", "us", and "our" refer to Tierlane, a business based in Toronto, Ontario, Canada.
2What Cookies Are
A cookie is a small text file that a website asks your browser to store on your device. Cookies are widely used to make websites work, to remember preferences, and to provide analytics.
In this policy, "cookies" also covers other locally stored data such as HTML5 local storage, session storage, and pixel tags (1×1 transparent images sometimes used to record that a page loaded). The legal rules under EU ePrivacy, UK PECR, Quebec Law 25, and Brazil's LGPD apply equally to all of these technologies.
We use first-party cookies only: cookies set by Tierlane domains. We do not use third-party advertising cookies and we do not participate in cross-context behavioural advertising.
3Tierlane's Two Surfaces
Tierlane has two web surfaces, and they store different things on your device.
3.1 The marketing site (tierlane.app)
This is the public website where you can read about Tierlane, see pricing, and read our legal pages. You do not need a Tierlane account to visit it.
The marketing site sets no cookies and stores nothing on your device. It runs no advertising, marketing, or analytics script in your browser, and it writes no identifier of any kind. Because nothing is stored, there is no consent for us to collect, and the site presents no cookie banner in any jurisdiction. This is not an opt-out arrangement and not a claim that consent is unnecessary — there is simply nothing to consent to.
Where we do measure product usage, that measurement happens on our servers and never in your browser. Section 4.3 explains how.
3.2 The embedded admin app (app.tierlane.app, served inside the Shopify Admin)
When you install Tierlane and use it inside the Shopify Admin, the app sets one strictly-necessary cookie pair while you sign in, and remembers a small number of interface preferences using your browser's local and session storage. Sections 4.1 and 4.2 name every item.
All of it is first-party. None of it is used for advertising, profiling, or cross-site tracking, and none of it contains personal information. These items exist only inside the authenticated app after a merchant installs Tierlane; a visitor who has not installed the app never receives any of them.
We do not set advertising, marketing, or third-party analytics cookies in the embedded admin app. Pseudonymous product analytics are collected on our servers via PostHog Cloud EU, which records only shop_id and named events and discards IP addresses at ingestion. See Section 4.3.
4What We Store, Item by Item
Every item Tierlane stores on your device is listed in this section. If it is not named in one of these tables, we do not set it. Category 4.4 ("Advertising") does not apply to Tierlane: we do not use it.
4.1 Strictly-necessary cookies
These cookies are required for sign-in to work. Without them the authorisation handshake that connects the app to your Shopify store cannot complete safely.
| Cookie | Surface | Purpose | Duration |
|---|---|---|---|
shopify_app_state |
app.tierlane.app | A single-use random value that protects the Shopify sign-in handshake against request forgery (CSRF) | 60 seconds; deleted the moment sign-in completes |
shopify_app_state.sig |
app.tierlane.app | Signature that lets our server verify the value above has not been tampered with | 60 seconds; deleted the moment sign-in completes |
Both are set by the official Shopify app library. Both carry the Secure, HttpOnly, and SameSite=Lax attributes, which means they are sent only over HTTPS and cannot be read by JavaScript running in your browser.
Tierlane does not use a cookie to keep you signed in. The embedded app authenticates with Shopify session tokens, which are held in memory for the life of the page and are never written to your device; the corresponding session record is stored on our servers. There is no "remember me" cookie, no client-side CSRF cookie, and no load-balancing cookie.
Strictly-necessary cookies do not require consent under any privacy law we are aware of.
4.2 Interface preferences (local and session storage)
The embedded admin app remembers a few display choices so that the interface does not reset each time you open it. These are held in your browser's local or session storage rather than as cookies, and are readable only by app.tierlane.app.
| Key | Storage | Purpose | Duration |
|---|---|---|---|
tl_email_pref |
Local storage | Remembers whether you left the buyer's original email expanded or collapsed on an order | Until you clear your browser's site data |
tl_queue_collapsed |
Local storage | Remembers whether you collapsed the order-queue side rail | Until you clear your browser's site data |
tl:queue-segment |
Session storage | Remembers which queue tab you were on, so that returning from an order does not send you back to the first tab | Cleared when you close the browser tab |
Each of these holds a single display flag. None contains personal information, none identifies you, and none records anything about your buyers or their orders. They are read only by the interface running in your own browser; their values are not transmitted to us or to any third party.
4.3 Analytics — nothing is stored in your browser
We use PostHog Cloud EU to understand which features are used and where merchants encounter friction. This is server-side only. Tierlane loads no PostHog script — and no analytics script of any kind — in your browser. Events are sent from our servers, so no analytics cookie and no analytics identifier is written to your device.
What that means in practice:
- No
ph_*cookie, and no first-party analytics identifier, is set on either surface. - We do not distinguish a returning anonymous visitor from a new one on the marketing site, because we have no browser-side means to do so.
- Person profiles are identified only by Shopify
shop_id— a store, not a person. - IP addresses are discarded at ingestion, and we do not capture Buyer personal data.
- Retention is 90 days.
Because our analytics neither reads from nor writes to your device, the EU ePrivacy, UK PECR, and Quebec Law 25 rules on access to terminal equipment are not engaged by it. The underlying processing is described in our Privacy Policy and in our Sub-processor List, Section 3.4.
4.4 Advertising / marketing / third-party tracking
We do not use these. We do not set Facebook, Google Ads, LinkedIn, TikTok, or any other third-party advertising or remarketing cookies. We do not sell or share information for cross-context behavioural advertising. We do not engage in profiling for targeted advertising.
5Third-Party Cookies
We do not intentionally set third-party cookies. The only third-party content we embed is the Shopify App Bridge in the embedded admin app, which Shopify uses to render the app inside the Shopify Admin and to authenticate the session. Any cookies or storage Shopify sets through App Bridge are governed by Shopify's own cookie and privacy policies and are necessary for the Service to function.
If you visit a third-party site through a link on tierlane.app, that third party's cookie practices are governed by its own policies.
6Managing Your Cookies
6.1 Through Tierlane
Tierlane presents no cookie banner and no cookie-preferences control, because we set nothing that requires your consent. The marketing site stores nothing at all (Section 3.1), and the embedded admin app stores only the strictly-necessary sign-in cookies in Section 4.1 together with the interface preferences in Section 4.2.
To clear the interface preferences, clear site data for app.tierlane.app in your browser as described in Section 6.2. The app will simply return to its default layout; nothing else is affected.
If we ever introduce a cookie or storage item that does require consent, we will build the consent mechanism before setting it, describe it in this section, and notify you in advance under Section 7.
6.2 Through your browser
Most browsers let you view, manage, and delete cookies through their settings. The exact steps depend on your browser:
- Chrome / Edge / Brave: Settings → Privacy and security → Cookies and other site data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari (macOS): Safari → Settings → Privacy.
- Safari (iOS): Settings → Safari → Block all cookies / Clear history.
Blocking strictly-necessary cookies will prevent parts of the Service from working.
6.3 Browser-level Do Not Track and Global Privacy Control signals
- The Do Not Track (DNT) header is a now-obsolete browser signal that most websites no longer honour. Tierlane runs no browser-side analytics or advertising technology on either surface, so there is nothing for DNT to switch off: we do not track you across sites and we do not build a browsing profile, whether or not the header is present.
- The Global Privacy Control (GPC) header is honoured by Tierlane as an opt-out of sale and sharing for the purposes of US state privacy laws (CCPA, CPRA, CTDPA, CPA, etc.). We do not sell or share personal information, and we do not engage in cross-context behavioural advertising, so there is no such processing for the signal to stop. We honour it regardless.
7Updates to This Cookie Policy
We may update this Cookie Policy from time to time. The Effective Date and Version at the top of the page show when it was last updated. Material changes (the addition of a new cookie category, a change to who can read the cookies, or a change to retention duration) will be notified in advance under the same notice mechanism described in Section 14 of the Privacy Policy.
A change log is maintained at tierlane.app/cookie-policy/changes.
8Contact
For questions about this Cookie Policy:
- Privacy inquiries: privacy@tierlane.app
- Legal inquiries: legal@tierlane.app
- Security incidents: security@tierlane.app
- General contact: support@tierlane.app
To exercise broader privacy rights (access, deletion, correction, portability), see Section 9 of the Privacy Policy.