Cookie & Storage Policy

1. Cookie Minimization & Privacy Guarantee

All tools work without an account. Accounts are optional and store only business profiles and dynamic QR links. Documents, invoices and tool data are never uploaded.

Ripitoo enforces strict cookie minimization. We do not use third-party tracking cookies, behavioral tracking pixels, or external user profiling cookies.

2. Strictly Necessary Authentication Cookies

When you sign in to an optional account, we use strictly necessary session cookies configured with:

• HttpOnly: Prevents access via client scripts to protect against cross-site scripting (XSS).
• Secure: Encrypted and transmitted solely over HTTPS connections.
• SameSite=Lax/Strict: Protects against cross-site request forgery (CSRF).

3. LocalStorage for Preferences

For users browsing without an account, we use HTML5 LocalStorage to remember your light/dark theme preference, selected audience region, and pinned favorite utilities locally on your device.