Cookie Policy
Last updated: 12 October 2026
2. How We Use Cookies
Tibby uses cookies to provide core functionality, keep you logged in securely, and remember your preferences. We categorise our cookies into three groups:
- Essential — Required for the Platform to function. Cannot be disabled.
- Analytics — Help us understand how features are used. Optional.
- Marketing — Used for relevant communications. Optional.
You can manage your cookie preferences at any time using the cookie consent manager or in Settings → Data & Privacy.
3. Essential Cookies
These cookies are strictly necessary for the Platform to function. They cannot be disabled without breaking core features like login and form security.
| Cookie Name | Purpose | Duration |
|---|---|---|
_send_billie_key |
Session cookie — keeps you logged in and maintains your session state | Session (browser close) |
_csrf_token |
Security token — protects against cross-site request forgery attacks | Session |
_send_billie_web_user_remember_me |
Remember me — keeps you logged in across browser sessions when selected | 14 days |
_send_billie_portal |
Client portal session — maintains client login for the invoice portal | 30 days |
_send_billie_portal_account |
Client portal login — keeps a returning client signed in across sessions | 30 days |
_sb_cookie_consent |
Cookie preferences — remembers your cookie consent choices | 12 months |
Local Storage (Browser Storage)
In addition to cookies, Tibby stores things in your browser’s own local storage. Most of it is preferences, but not all of it — work in progress and, in demo mode, business data live there too. None of it is sent to us by the browser storage itself, and clearing your site data removes all of it, including anything unsaved.
| Key | Purpose |
|---|---|
sendBillieTheme, portal-theme |
Your dark/light mode preference |
sendBillieDemoMode |
Whether you’re using demo mode (Star Trek sample data) or live mode |
sb_locale |
Your language preference |
sendBillieLastEmail, sendBillieLastPortalEmail |
Your last used email address for faster login |
dashboardPreferences, selectedTemplate |
Your saved dashboard layout and invoice-template choices |
Appearance and layout — e.g. proCustomisation, wfCustomisation, sb_lancer_avatar, sendBillie_collapsedSections, pdfSavePreference, sendBillieSavedSearches |
Your branding choices, which sections you have collapsed, your saved searches, and how you prefer PDFs to be handled |
Hints you have dismissed — e.g. invoiceNavWarningDismissed, dismissDeleteExpenseWarning, sendBillie_hideDeleteRateWarning, hideDeletePkgWarning, wfWordmarkWarningDismissed, sb_archive_skip_confirm, sendbillie_start_tour |
So a warning or tour you have already closed does not keep reappearing |
Work in progress — invoiceDrafts, companySetupDraft, pendingPackage, sendBillie_recurringTemplates |
Not just a preference. An invoice you are part-way through, your company setup before you save it, and recurring-invoice templates are held in your browser so you do not lose them. They can contain client names and amounts. Clearing site data loses anything not yet saved to your account. |
Demo data — clients, invoices, currentBalance, totalInvoiceCount, burnieType, burnieTargetMonths |
Not just a preference. In demo mode the sample business data you create lives only in your browser and never reaches our servers. Clearing site data removes it. |
4. Analytics Cookies
Currently: Tibby does not use any third-party analytics cookies. We do not use Google Analytics, Facebook Pixel, or similar tracking services, and we do not track you across other websites.
To be precise rather than merely reassuring: two companies do receive a request from your browser, because the pages load typefaces from them — Adobe on every page, and Google when you open the invoice branding or template screens. Requesting a font file sends your IP address and browser details to whoever serves it. That is not analytics and it sets no cookie here, but it is a request leaving your browser, so you should know about it. Both are listed in our Privacy Policy.
In the future, we may introduce privacy-friendly analytics to understand how features are used and improve the Platform. If we do, these cookies will be:
- Off by default — only activated with your explicit consent
- Privacy-focused — no cross-site tracking, no fingerprinting
- Revocable — you can disable them at any time from Settings
We will update this policy and notify you before introducing any analytics cookies.
5. Marketing Cookies
Currently: Tibby does not use any marketing cookies. We do not track you across websites or serve targeted advertisements.
If we introduce marketing cookies in the future, they will require your explicit consent and can be managed through the cookie consent manager.
6. Managing Your Preferences
You have several ways to control cookies on Tibby:
6.1 Cookie Consent Manager
On your first visit, a cookie consent banner lets you choose which categories of cookies to accept. You can change your mind at any time, in two places: the Cookie Settings button at the bottom of this page, and Settings → Data & Privacy once you are signed in. Withdrawing your consent is as easy as giving it, and takes effect immediately.
6.2 Browser Settings
You can also manage cookies through your browser settings. Most browsers allow you to:
- View and delete existing cookies
- Block all cookies or only third-party cookies
- Set rules for specific websites
Note that blocking essential cookies will prevent you from logging in and using the Platform.
6.3 Local Storage
Local storage data can be cleared through your browser’s developer tools or by clearing all site data for tibby.io in your browser settings.
7. Third-Party Cookies
When you make a payment through Mollie, you may be redirected to Mollie’s payment page or your bank’s website. These third parties may set their own cookies according to their own privacy policies. Tibby has no control over these cookies.
Similarly, when you connect your bank via Enable Banking, Enable Banking’s authentication flow may set cookies on their domain.
Our public sign-up and waitlist forms use Cloudflare Turnstile to tell humans from bots. Turnstile may store a security token in your browser; we use it only to protect account creation and not to track you across sites.
We recommend reviewing the cookie policies of these services:
8. Changes to This Policy
We may update this Cookie Policy when we introduce new cookies or change how existing ones are used. If we make material changes, we will notify you by email and reset your cookie consent so you can review the new categories.
9. Contact Us
Tibby is a service of Blue Rhizome V.O.F., Mathenesserlaan 273 B, 3021 HG Rotterdam, the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 76801969. BTW (VAT) number NL860793941B01.
If you have questions about our use of cookies:
- Email: support@tibby.io
- Website: tibby.io
- Post: Blue Rhizome V.O.F., Mathenesserlaan 273 B, 3021 HG Rotterdam, the Netherlands (KVK 76801969)