Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website operators information about how users interact with their site. Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period or until you delete them). At Tink.you, we use cookies primarily for essential functionality, such as maintaining your session while you navigate our secure backoffice or complete a tip payment through WhatsApp-initiated transactions.

a) Strictly Necessary Cookies: These cookies are essential for the operation of Tink.you. They enable core functionality such as security, session management, and authentication. Without these cookies, services you have requested (such as logging into your GiG Worker backoffice or processing a tip payment) cannot be provided. These cookies do not collect personal information for marketing purposes.

b) Session Cookies: We use PHP session cookies (PHPSESSID) to maintain your authenticated state as you navigate through secured areas of our platform. These cookies are deleted automatically when you close your browser or after a period of inactivity.

c) Security Cookies: We implement CSRF (Cross-Site Request Forgery) protection tokens stored in cookies to ensure that form submissions and sensitive actions originate from legitimate sources, protecting both GiG Workers and tippers from malicious attacks.

Important Note: Tink.you does NOT use advertising cookies, tracking cookies, or analytics cookies from third-party advertising networks. We do not sell, rent, or share your cookie data with advertisers.

To provide our tipping and GiG Worker management services, we integrate with trusted third-party providers who may set their own cookies when you interact with their services through our platform:

a) Stripe (Payment Processing): When you make a tip payment, Stripe may set cookies to process your transaction securely, prevent fraud, and comply with financial regulations. Stripe's cookie policy is available at stripe.com/privacy.

b) Didit (Identity Verification / KYC): For GiG Workers completing identity verification (Know Your Customer), Didit may set cookies to manage the verification session and ensure secure document processing. Their privacy practices are detailed at didit.me/privacy.

c) Twilio (WhatsApp Communication): Our WhatsApp-based conversation system is powered by Twilio. While Twilio primarily operates server-side and does not typically set cookies on your device through our service, their privacy policy is available at twilio.com/legal/privacy.

d) AbstractAPI (Email & IBAN Validation): We use AbstractAPI for validating email addresses and IBAN numbers. These are server-side API calls and do not set cookies on your device.

The retention period for cookies varies depending on their purpose:

• Session Cookies (PHPSESSID): Expire when you close your browser or after 10 minutes of inactivity for security purposes.

• CSRF Protection Tokens: Valid for the duration of your session and cleared upon logout or session expiration.

• Authentication Remember Tokens: If you opt to stay logged in, these may persist for up to 30 days, after which you will need to authenticate again.

• Third-Party Cookies: Retention periods are determined by the respective third-party providers (Stripe, Didit). We encourage you to review their individual privacy policies for detailed information.

You have the right to control and manage cookies on your device. Most web browsers allow you to:

• View cookies stored on your device and delete them individually or all at once.
• Block cookies from specific websites or all websites.
• Set preferences to be notified when a cookie is being set.

Browser-specific instructions:
• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Please note: Disabling strictly necessary cookies may prevent you from using certain features of Tink.you, including logging into your GiG Worker backoffice or completing tip payments.

As a company registered in Luxembourg, timeNough Europe Inc. SARL-S complies with the European Union's General Data Protection Regulation (GDPR) and the ePrivacy Directive. Under these regulations, you have the right to:

• Be informed about the cookies we use and their purposes (this policy).
• Withdraw consent at any time by adjusting your browser settings or contacting us.
• Access information about what data we process through cookies.
• Request deletion of any personal data collected via cookies.

Since we only use strictly necessary cookies that do not require consent under GDPR Article 6(1)(f) (legitimate interests for security and essential functionality), we do not display a cookie consent banner. However, you retain full control over your browser's cookie settings.

We may update this Cookies Policy from time to time to reflect changes in technology, legislation, our business operations, or for other operational, legal, or regulatory reasons. When we make significant changes, we will update the "Last updated" date at the top of this policy. We encourage you to periodically review this page to stay informed about our use of cookies. For GiG Workers with registered accounts, significant changes may also be communicated via email notification to your registered email address.

If you have any questions, concerns, or requests regarding this Cookies Policy or our use of cookies, please contact us:

timeNough Europe Inc. SARL-S
57 Avenue de la Gare
L-1611 Luxembourg
Luxembourg

Registration Number: B267980
VAT Number: LU34107527
Email: legal@tink.you

We aim to respond to all legitimate inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), Luxembourg's data protection authority.