1. What this policy covers
This policy explains the cookies and similar technologies used on leap-social.com and in the Leap application, operated by Tide Venture Studio Ltd.
It covers technologies we set in your browser. It does not cover the data Leap retrieves from social media platforms on your instruction, that is explained in section 7 and in the Privacy Policy.
2. What cookies are
Cookies are small text files a website stores in your browser. Similar technologies include local storage, session storage and pixels. We use the word “cookies” throughout to cover all of them.
Cookies fall into two groups for legal purposes, and the distinction matters because it determines whether we need your permission:
Strictly necessary cookies are those without which a service you have asked for cannot work, keeping you signed in, protecting against cross-site request forgery, remembering which organization you are working in. We do not need your consent for these, and you cannot turn them off without breaking the Service.
All other cookies: including analytics, require your consent before they are set. We ask for that consent through our cookie banner.
3. Your choices
When you first visit, you will see a cookie banner. Non-essential cookies are not set until you accept them. If you decline, or simply ignore the banner, only the strictly necessary cookies in section 4 are used, and the Service works normally.
You can change your mind at any time:
- through the cookie settings link in the footer of our website and in your account settings;
- by clearing cookies in your browser (see section 8).
Withdrawing consent is as easy as giving it, and takes effect immediately for future collection.
4. Strictly necessary cookies
These are always active. They do not track you across websites and are not used for advertising.
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
| Session access token | Holds your short-lived session access token so you stay signed in. httpOnly, Secure, SameSite=Lax | First-party | 15 minutes |
| Refresh token | Renews your session without signing in again. Stored server-side only as a hash. httpOnly, Secure, SameSite=Lax | First-party | 30 days |
| CSRF / state | Protects sign-in and account-connection flows against cross-site request forgery and replay | First-party | Session / ~10 minutes |
| Cookie consent | Records your cookie choices so we do not ask again | First-party | 6 months |
| Organization context | Remembers which organization or workspace you are working in | First-party | Session |
5. Analytics cookies
These are only set if you accept them.
We use Google Analytics, provided by Google LLC, to understand how people find and use Leap, which pages are visited, which features are used, where people encounter difficulty, so that we can improve the product. We use this in aggregate; we do not use it to identify you personally or to advertise to you.
| Cookie | Purpose | Provider | Expires |
|---|---|---|---|
_ga | Distinguishes one browser from another so visits can be counted | 2 years | |
_ga_* | Maintains session state for Google Analytics 4 | 2 years |
Where this data goes
Google Analytics data is processed by Google LLC in the United States. That transfer is made under Standard Contractual Clauses through Google's data processing terms. We have configured Google Analytics so that IP addresses are not stored and data is not shared with Google for advertising or model training purposes.
Retention
Google Analytics data is retained for 14 months and then deleted.
If we add other analytics tools, product analytics, session replay, heatmaps, we will update this table and ask for your consent before setting them.
6. What we do not use
To be explicit, because these are what people are usually concerned about:
- No advertising or retargeting cookies. We do not run ad pixels, and we do not build advertising audiences from your use of Leap.
- No selling or sharing of personal data for cross-context behavioural advertising.
- No session replay or screen recording.
- No cookies at all in your customers' published content. Leap does not inject anything into the posts you publish.
7. Social platform data is not cookies
Leap retrieves analytics about your posts and channels, followers, reach, impressions, engagement, from Facebook, Instagram, LinkedIn, X, TikTok, YouTube, Pinterest and Telegram, through their official APIs, using the permissions you grant when you connect an account.
This is not cookie data and it is not collected from your browser. It is data those platforms hold about accounts you own or are authorized to manage, which we retrieve on your instruction to provide the Service. It is described in the Privacy Policy, and it is not affected by your cookie choices.
Note separately that the social platforms set their own cookies on their own websites, under their own policies, over which we have no control.
8. Managing cookies in your browser
Beyond our cookie settings, you can control cookies in your browser, blocking them, deleting them, or being warned before they are set. Blocking strictly necessary cookies will stop you being able to sign in.
Instructions: Chrome · Safari · Firefox · Edge
You can also opt out of Google Analytics across all websites using Google's browser add-on.
9. Changes
We may update this policy as the Service changes. We will post the updated version with a new “Last updated” date. If we add a new category of cookie, we will ask for your consent before setting it, regardless of what this policy says.
10. Contact
privacy@leap-social.com · Tide Venture Studio Ltd, London.
Your cookie preferences
Choose which categories you allow. Strictly necessary cookies are always on.