Legal

Cookie Policy

This policy explains how Tugboat Supply uses cookies and similar tracking technologies on this website and the platform, and how you can control them.

Effective:: July 1, 2026
Last updated:: July 1, 2026

Short version. We use strictly necessary cookies to operate the platform (authentication sessions, security tokens, idempotency keys). We use analytics cookies only if you consent. We do not use advertising, retargeting, or cross-site tracking cookies. We do not sell cookie-derived data.

1.What Are Cookies?

Cookies are small text files placed on your device by a web server when you visit a website. Similar technologies include web storage (localStorage, sessionStorage), web beacons, and fingerprinting scripts. This policy covers all such technologies collectively referred to as “cookies.”

Cookies serve different purposes: some are essential for the website or platform to function; others help us understand how people use our services; others enable personalization or advertising.

2.Categories of Cookies We Use

2.1 Strictly Necessary Cookies (always active)

These cookies are required for the platform to function. They cannot be disabled without rendering the service inoperable. No consent is required to set them.

Cookie / Key	Purpose	Duration
session_token	Authenticates a logged-in Supplier user or Captain.	Session
csrf_token	Prevents cross-site request forgery attacks.	Session
tenant_id	Identifies which Supplier tenant a user belongs to for data isolation.	Session
idem_key	Stores idempotency keys for in-progress order submits to prevent duplicates on flaky connections.	30 minutes
__tbs_prefs	Stores UI preferences (e.g., dark-mode toggle state) in localStorage — no server transmission.	Persistent (local)

2.2 Analytics Cookies (consent required)

If you consent, we set analytics cookies to understand how visitors interact with this marketing website — which pages are visited, where visitors come from, and how forms are used. This data is aggregated and de-identified; we do not use it to track individual users across third-party websites.

Cookie	Provider	Duration
_tbs_analytics	Tugboat Supply (first-party)	13 months
_ga, _ga_*	Google Analytics (if enabled)	13 months

Analytics cookies are not set until you have given consent. If Google Analytics is enabled, it is configured with IP anonymization and data-sharing restrictions; we do not allow Google to use this data for advertising purposes.

2.3 Cookies We Do Not Use

We do not set or permit:

Advertising or retargeting cookies.
Social media tracking pixels.
Cross-site behavioral tracking cookies.
Fingerprinting scripts for device identification.
Any cookie that transmits personal data outside the United States.

3.localStorage and sessionStorage

In addition to cookies, we use browser web storage:

sessionStorage — stores temporary in-progress order draft data and form state for the duration of a browser tab session. Cleared when the tab is closed.
localStorage — stores user interface preferences (e.g., sidebar state) that persist across sessions. Does not contain personal information and is never transmitted to our servers.

Budget visibility widgets use localStorage to store mock budget data. This data is not synced to our servers. Clearing your browser’s localStorage will reset these widgets.

4.Managing and Opting Out of Cookies

4.1 Browser controls

You can control cookies through your browser settings. Most browsers allow you to:

View and delete existing cookies.
Block third-party cookies.
Set preferences for specific websites.
Be notified when a new cookie is set.

Disabling strictly necessary cookies will prevent you from logging into the platform. Disabling analytics cookies will not affect platform functionality.

4.2 Do Not Track (DNT) and Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) browser signal. When your browser sends a GPC signal, we treat it as an opt-out of the sale and sharing of personal information, consistent with the California Consumer Privacy Act, and will not set non-essential cookies for that session.

We also respect browser-level Do Not Track (DNT) signals on a best-efforts basis; however, because DNT has no formal legal standard, GPC is the authoritative signal we act upon.

4.3 Opting out of Google Analytics

If Google Analytics is active, you may opt out using the Google Analytics Opt-out Browser Add-on.

6.Changes to This Policy

We may update this Cookie Policy to reflect changes in our practices or applicable law. Material changes will be accompanied by an updated “Last updated” date at the top of this page. We recommend reviewing this policy periodically.

For questions, contact privacy@tugboatsupply.com.

This document is provided for informational purposes and does not constitute legal advice. Tugboat Supply recommends that you consult qualified legal counsel regarding your specific situation. For questions about this document, contact legal@tugboatsupply.com.