Cookie policy
Last updated
What we store in your browser, why, and what happens if you refuse it. This covers trovewall.com and the offerwall we serve inside publishers' sites.
The short version
We do not use advertising cookies, we do not run third-party analytics, and nothing we set follows you around other websites. The offerwall does not set a cookie at all — it identifies your session through a parameter in the URL that the publisher gives us, not through anything stored on your device.
What we set, and when
| Name | Set when | Lifetime | What it is for |
|---|---|---|---|
TWSESSID |
You sign in, or submit any form | 24 hours | Keeps you signed in for the length of a visit and carries the CSRF token that proves a form submission came from a page we served. Strictly necessary — without it there is no way to log in. |
TWJWT |
You tick "remember me" at sign-in | 7 days | A signed token that lets us restore your session after the one above has expired. It contains your account id and nothing else, it is signed so it cannot be edited, and deleting it simply signs you out. |
tw-scheme |
You use the light/dark toggle | Until you clear it | Browser storage rather than a cookie — it is never sent to us. It only remembers whether you asked for the light or the dark theme. |
All three are first-party. The two cookies are marked HttpOnly so scripts
cannot read them, SameSite=Lax so they are not sent
on cross-site requests, and Secure so they are only ever sent over HTTPS.
The offerwall sets nothing
When a publisher embeds our offerwall in their app or site, the frame you see is served
by us but stores nothing on your device. Your identity to us is the opaque
user_id the publisher puts in the embed URL — a string they chose, which we
cannot connect to a name, an email address or an account anywhere else. That is a
deliberate design choice and it is described in our
privacy policy.
Clicking an offer records a click on our servers: the time, the offer, the publisher, a coarse location derived from your IP address, and your device type. That is a server-side record, not a cookie, and it exists because the advertiser has to be able to verify the action they are paying for really happened.
Cookies we do not set
- No advertising or retargeting cookies. We do not build profiles and we do not sell audiences.
- No third-party analytics. No Google Analytics, no Facebook pixel, no session recording. Our own statistics are counted server-side from events we already have to store.
- No cross-site tracking. Nothing we set is readable by another site, and we do not read anything set by one.
What an advertiser's site may do
When you click through to an advertiser, you are on their website under their rules. They will usually set their own cookies, including ones that measure whether you completed the action. We have no control over those and no access to them; their own cookie notice applies from the moment you arrive.
The one case where their page appears inside ours is a Paid To Click offer, where the advertiser's site is shown in a frame below a timer. It is still their page and still their cookies — the frame changes where you see it, not who is responsible for it.
Refusing or removing them
Every browser can block or delete cookies, usually under Settings → Privacy. Because we only set strictly necessary ones, blocking them does not reduce tracking — there is none to reduce — but it will stop you signing in, since the session cookie is what a signed-in state is. Browsing the public site and using an embedded offerwall both work with cookies switched off entirely.
We show no cookie banner. A banner exists to collect consent for cookies that need it, and strictly necessary cookies do not; adding one would be theatre.
Changes
If we start setting a cookie that is not in the table above, this page changes in the same release and the date at the top moves. There is no other way we will tell you, so if this matters to you, the date is the thing to watch.
Who you are dealing with
Trovewall is operated by Trovewall LLC., registered at Office 251 House of Francis, Ile du Port, Mahe, Seychelles.
| Questions about this document | [email protected] |
| Publisher accounts and traffic | [email protected] |
| Advertiser accounts and campaigns | [email protected] |
| Everything else | [email protected] |