Anonymous scan ownership
The first-party twin_session cookie contains a random session token, lasts up to 30 days, and lets the app associate your browser with anonymous scans and usage limits. The database stores a hash of this token. The cookie is HTTP-only, uses SameSite=Lax, and is Secure in production.
Authentication and checkout
Clerk may set authentication and security cookies when account features are enabled. Dodo Payments may use cookies or similar technologies in its checkout for payment processing and fraud prevention. Their current cookie practices are described in their privacy notices. Authentication cookies can have different lifetimes from our anonymous session cookie.
Website and operational analytics
We use Vercel Web Analytics to understand aggregate website traffic, including page views, referrals, and device and browser information. It does not use analytics cookies. Admin pages are excluded, and query strings and URL fragments are removed from analytics event URLs. Scan-related operational events are recorded separately in our own database. We do not use an advertising pixel.
Your controls
You can block or delete cookies using your browser settings. Blocking essential cookies can prevent sign-in, checkout, or access to anonymous findings. Deleting the anonymous session cookie may lose browser access to unclaimed scans; it does not erase stored scan records. Use Settings to delete this browser’s unclaimed scans before clearing cookies, or contact us for help with a data request.
Contact
Operator: SaaS Twin.
For questions, support, or data requests, visit our Contact page.