Tailgate Books

Measureable Media LLC

TAILGATE BOOKS

COOKIES POLICY

Version 1.1, effective October 20, 2026 | Last Updated: October 20, 2026

This Cookies Policy describes how Measureable Media LLC (“Measureable Media,” “we,” “our,” or “us”) uses cookies and similar technologies, including browser local storage, in Tailgate Books. It covers our public website (gettailgatebooks.com), our web app (app.gettailgatebooks.com), the Document pages that Contractors’ Customers open to view estimates and invoices (at app.gettailgatebooks.com), and our iPhone and Android apps (together, the “Services”). Capitalized terms not defined here have the meanings given in our Terms of Use. This Policy is part of our Privacy Policy, which Section 1.5 summarizes.

Current state, stated plainly: none of our Services sets cookies, though Stripe's own script sets Stripe's cookies on the two website pages described in (iv). The web app keeps your sign-in in your browser’s local storage, and our mobile apps keep it in your phone’s secure keychain. The web app also keeps your preferences, and an offline copy of your own records, in your browser so it works without a signal. The Document pages a Customer opens store nothing on the Customer’s device and load no third-party scripts, fonts, or analytics. Our public website stores only your language choice and, if you came from one of our Meta ads, Meta’s ad-click identifier, loads no fonts, scripts, or other resources from any other company except Stripe's script on those two pages, and does not currently run an analytics tool; if we add one, it will be a privacy-friendly tool that places nothing on your device. We use no advertising or tracking cookies, pixels, or scripts anywhere. If you arrive at our public website from one of our Facebook or Instagram ads, the website keeps Meta’s ad-click identifier in your browser, unless your browser sends a Global Privacy Control signal, so that, if you sign up, our servers can tell Meta that the ad worked, as (v) describes. Because everything we use is either strictly necessary or first-party storage that no other company can read, and you can opt out of advertising measurement, we do not show a cookie consent banner.

What Are Cookies and Similar Technologies?

A cookie is a small text file that a website transfers to your browser so that the site can recognize your device when you return and remember certain information, such as which pages you visit or choices you make. “Local storage” and “session storage” are similar browser-based mechanisms that a site or application can use to store information on your device. Unlike cookies, they are not automatically sent back to the server with every request, but they serve a comparable function, and we describe them here for the same reason. On a phone, an app can store information in the operating system’s secure keychain, which only that app can read.

Types of Cookies and Local Storage We Use

Consistent with Section 1.5 of our Privacy Policy, we categorize the storage and similar technologies in use across our Services as follows.

(i) Strictly Necessary Storage (currently in use, web app and mobile apps): when you sign in to the web app, we store an authentication token in your browser’s local storage. It keeps you signed in as you move between pages and protects the security of your session. In our mobile apps, the same token is kept in your phone’s secure keychain rather than in a browser. This storage is required for sign-in to work, cannot be disabled without preventing sign-in, and is not used to track you on other websites. We do not use cookies for this purpose.

(ii) Functional Local Storage (currently in use, web app): the web app also keeps in your browser's local storage: your preferences (your choice of English or Spanish, the email address you last signed in with, and whether app lock is on); which one-time notices and celebrations you have already seen; a flag used while you reset your password; a queue of changes waiting to upload; an estimate you have started but not saved; and an offline copy of your own records, so the app keeps working without a signal. Our public website stores only your choice of English or Spanish and, if you came from one of our Meta ads, the identifier described in (v). Except for the ad-click identifier described in (v), this storage is first-party, is not shared with anyone, is not used to track you, and is used only to support your own use of the Services. The offline copy can include your Customers' names, addresses, and other details, so do not use the web app on a shared computer without signing out. Signing out clears the offline copy of your records and any unsaved estimate draft. Changes you made offline that have not yet uploaded are kept, so your work isn't lost; they are stored under your own sign-in, are never shown to anyone else who signs in on that browser, and upload when you sign back in. We do not use session storage.

(iii) Cookieless Website Analytics (not yet in use; public website only): our public website may use a privacy-friendly analytics service that measures overall traffic, such as visits, referring sites, popular pages, country, device type, and whether a visitor clicked to sign up. Any tool we use will set no cookies, store nothing on your device, does not collect personal information, and does not follow you across other websites or from one visit to the next. It will report only aggregate numbers to us, and we will name it here and on our subprocessor page before we use it. The web app, the mobile apps, and Customer Document pages run no analytics of any kind.

(iv) Third-Party Pages and Forms (not set by us): some steps take you to pages run by other companies, which may set their own cookies under their own policies. These include Stripe’s hosted checkout pages, where Contractors subscribe and Customers pay invoices and Stripe’s account-setup pages for Contractors who accept card payments. Two pages on our public website, the page a Contractor uses to respond to a card dispute and the page a Contractor uses to set up card payments, load Stripe’s own script so they can open Stripe’s embedded forms. Stripe’s script may set Stripe’s cookies on those pages, under Stripe’s policies, for fraud prevention and security. No other page of our website loads anything from another company. We do not control or receive those cookies. See Stripe’s privacy and cookie policies, which our Privacy Policy links to.

(v) Advertising Measurement (server to server; no advertising cookies, pixels, or scripts): we do not use Google Analytics, the Meta (Facebook) Pixel, the LinkedIn Insight Tag, or any other advertising or cross-site tracking cookie, tracking pixel, web beacon, or software development kit on our website, web app, Document pages, or mobile apps. Our mobile apps do not collect your device’s advertising identifier. We do advertise on Facebook and Instagram. When you click one of our ads, Meta adds an ad-click identifier to the web address of the page you land on. Unless your browser sends a Global Privacy Control signal, our public website keeps that identifier in your browser’s local storage (see the table below) and passes it to our sign-up page. If you sign up, we save it with your account, and when you start a free trial or make your first subscription payment, our servers send Meta the identifier, the event, your account email address in hashed form, and the IP address and browser information from your sign-up. Meta uses that information under its own terms to measure and deliver our ads, as Section 1.6 of our Privacy Policy describes. The identifier is first-party storage: Meta and other companies cannot read it from your browser, and nothing from Meta loads on our pages. Under some state privacy laws, this may count as “sharing” personal information or “targeted advertising,” and you can opt out as described below. If we ever introduce an advertising or tracking cookie, pixel, or software development kit, we will identify the provider and the data collected, update this Policy and our Privacy Policy first, and give you any notice and choice the law requires before it is used.

The table below reflects our current inventory across the Services:

Property Name / Key Storage Type Purpose Duration
Web app (app.gettailgatebooks.com) sb-hbbxmmvewpajsijrdsxi-auth-token localStorage Sign-in session token for the app Until you sign out or the session expires
Web app (app.gettailgatebooks.com) tb.pref.language localStorage Your choice of English or Spanish Until changed or cleared
Web app (app.gettailgatebooks.com) tb.pref.lastEmail localStorage The email address you last signed in with, to fill in the sign-in screen Until changed or cleared
Web app (app.gettailgatebooks.com) tb.pref.biometricUnlock localStorage Whether app lock is on Until changed or cleared
Web app (app.gettailgatebooks.com) micNoticeSeen localStorage Whether you have seen the one-time microphone notice Until cleared
Web app (app.gettailgatebooks.com) tb.seen.v1.* localStorage Which one-time notices and celebrations you have already seen Until cleared
Web app (app.gettailgatebooks.com) tb.auth.recoveryPending localStorage Marks that a password reset is in progress Removed when the reset is finished
Web app (app.gettailgatebooks.com) tb.outbox.v1 localStorage Changes you made offline, waiting to upload Removed as each change uploads ; kept when you sign out, for your own sign-in only, and uploaded when you sign back in
Web app (app.gettailgatebooks.com) tb.draft.estimate.v1 localStorage An estimate you have started but not saved Removed when you save or discard it, or when you sign out
Web app (app.gettailgatebooks.com) tb.cache.v1.* localStorage An offline copy of your own records, which can include Customer details, so the app works without a signal Updated as you use the app ; cleared when you sign out
Web app (app.gettailgatebooks.com) (sessionStorage) — None. The web app uses no session storage. —
Web app (app.gettailgatebooks.com) (cookies) — None. The web app sets no cookies. —
Mobile apps (iPhone and Android) Sign-in session token Device keychain (secure storage) Keeps you signed in to the app Until you sign out or delete the app
Customer Document pages (all) — None. No cookies, localStorage, or sessionStorage, and no third-party scripts, fonts, or analytics. —
Public website (gettailgatebooks.com) tb_lang localStorage Your choice of English or Spanish. No cookies, and no fonts, scripts, or analytics loaded from other companies, except Stripe’s script on two pages (rows below). Until changed or cleared
Public website (gettailgatebooks.com) and sign-up page tb_meta_click localStorage Meta’s ad-click identifier from the link in one of our Facebook or Instagram ads, kept so that, if you sign up, our servers can report the sign-up to Meta (see (v)). Not kept if your browser sends a Global Privacy Control signal. Meta and other companies cannot read it. Removed from your browser when you sign up (we then keep it with your account, as Section 1.6 of our Privacy Policy describes), or after ninety (90) days, whichever comes first
Public website (gettailgatebooks.com): card-dispute response and card-payment setup pages Stripe cookies (such as __stripe_mid and __stripe_sid) Cookies set by Stripe Set by Stripe’s script, which opens Stripe’s embedded forms, for fraud prevention and security. We do not set, read, or receive them. Set by Stripe under its own cookie policy

Because we use only strictly necessary and functional first-party storage, including the ad-click identifier described in (v), and no analytics that places anything on your device or collects personal information, we do not display a cookie consent banner. You still have these choices:

Internet browsers allow you to change your cookie and site-data settings, usually in the “settings,” “options,” or “preferences” menu of your browser. The following links may help:

Analytics and Advertising

We do not currently use any analytics technology. If we add a privacy-friendly analytics tool to our public website, it will run only there, not in the web app, the mobile apps, or Customer Document pages; it will set no cookies and place nothing on your device; and we will name it here before we use it. We do not use Google Analytics, the Meta (Facebook) Pixel, the LinkedIn Insight Tag, or any other analytics or advertising cookie, tracking pixel, web beacon, or tracking software. The only advertising technology we use is the server-to-server report to Meta described in (v), which places no Meta code on our pages. If we introduce any additional analytics or advertising technology, we will identify the provider and the data collected here, update this Policy and our Privacy Policy before it is used, and give you any notice and choice the law requires.

Disabling Cookies and Local Storage

If you do not want information stored on your device, you can block or clear cookies and site data by following the browser instructions above. General information about managing cookies is also available at https://www.allaboutcookies.org/manage-cookies/index.html. If you block or clear local storage for the web app, you will not be able to stay signed in, and the web app will not work as intended.

Updates to This Policy

We may update this Cookies Policy as our use of cookies and similar technologies changes. When we make a material change, we will give you at least thirty (30) days’ notice by email and in the app before it takes effect, consistent with our Privacy Policy. The “Last Updated” date at the top of this Policy reflects the most recent revision. You should check this Policy from time to time so you are aware of any changes.

Contact Us

If you have questions about this Cookies Policy or our data practices, please contact us:

Measureable Media LLC

Attn: Privacy

1500 N Grant St, Ste R, Denver, CO 80203

Email: privacy@gettailgatebooks.com

Website: gettailgatebooks.com