Cookie Policy

Cookies are small files a website stores in your browser. Websites also use similar technologies such as local storage and session storage, which work the same way for the purposes of this policy. Where this page says “storage,” it means any of these. This policy covers the BRKOUT website and web app. It should be read together with the Privacy Policy, which explains how BRKOUT handles personal information more broadly.

BRKOUT cannot work without these, so they do not require your consent. Sign-in session. When you sign in, BRKOUT stores your session in your browser’s local storage so you stay signed in between visits. It is removed when you sign out. Account connection security. While you connect or reconnect a TikTok account, BRKOUT checks that the response coming back from TikTok belongs to the request you started: the request is recorded on BRKOUT’s own servers with a single-use identifier, and the browser finishing the flow proves it is the one that began it by presenting your existing sign-in. Your browser also keeps one short-lived value for the duration of the tab — which account a reconnect was started for, so a retry goes to the right place. It is cleared when you close the tab. Bot protection. Sign-in, signup and public forms use Cloudflare Turnstile to block automated abuse. Turnstile loads a script from Cloudflare, which receives your IP address and browser details and may set its own cookies for that security check. Cloudflare’s privacy policy governs that processing. Payments. When you pay for a plan, our payment provider may use its own cookies or similar technologies to process the payment and prevent fraud.

BRKOUT remembers small choices you make, such as your cookie and privacy choices, having dismissed a tip or completed an onboarding step, so it does not ask again. These are stored in local storage and are only read by BRKOUT. They hold the choice itself and, once you have an account, the internal identifier of the account the choice belongs to — nothing else about you.

If you join the waitlist, BRKOUT keeps a single-purpose token in your browser’s local storage so you can return to your waitlist status page without signing in. It is only read by BRKOUT, is not used to track you anywhere else, and you can remove it by clearing this site’s data in your browser.

When you arrive through a Refer & Earn link, a waitlist share link or a link that carries campaign parameters (for example utm_source), BRKOUT stores the referral code, the campaign parameters, the site that referred you, the page you landed on and when you arrived. This is kept in your browser’s local storage for up to 30 days and is read when you join the waitlist or create an account, so the right referrer or campaign is credited. This storage is first-party only. It is never shared with an advertising network, never used to follow you across other websites and never combined with device fingerprinting. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked first, and nothing is stored until they agree. Until then, a referral is only remembered while the page is open. Everyone else can turn this off on the Your Privacy Choices page, which also removes anything already stored.

BRKOUT uses attribution data to understand which channels bring people to BRKOUT, and records product events inside the signed-in app (for example opening a recommendation or using a filter) to understand how BRKOUT is used and to improve it. Product events are recorded on BRKOUT’s own servers rather than through a third-party analytics tag. You can turn them off at any time in Settings, under Privacy & Data. The Privacy Policy explains what these events contain and how long they are kept.

BRKOUT does not currently use advertising or retargeting pixels (such as the TikTok Pixel, Meta Pixel or Google Ads tags), third-party analytics services, session-recording tools or any storage that tracks you across other websites. BRKOUT does not sell or share information collected through cookies or browser storage for cross-context behavioral advertising. Fonts are served from BRKOUT’s own servers, so loading a page does not send your IP address to a font provider.

Visitors whose browser is set to a timezone in the European Economic Area, the United Kingdom or Switzerland see a banner on their first visit with equal choices to accept or reject optional storage, or to choose by category. Nothing optional is stored before you choose. If BRKOUT adds a new analytics or advertising tool, it will name it on this page first and ask these visitors again, because consent only covers what you were told about.

BRKOUT does not sell or share personal information today. You can still opt out on the Your Privacy Choices page, linked in the footer as “Do Not Sell or Share My Personal Information.” If you are signed in when you save, the opt-out is also recorded on your BRKOUT account so it applies wherever you sign in. BRKOUT treats a Global Privacy Control signal from your browser as a valid opt-out of sale and sharing, and records it on your account when you are signed in. Opting out also means BRKOUT will not load advertising tags for you if it ever uses them.

You can change your choices at any time on the Your Privacy Choices page (the footer’s Cookie Settings link). You can also block or delete cookies and site storage in your browser’s settings. Blocking strictly necessary storage will stop you from signing in or submitting forms. Clearing storage signs you out, removes any saved referral or campaign information and resets your cookie choices. Product events can be turned off in Settings, under Privacy & Data.

BRKOUT will update this policy as the Service changes. The “Last updated” date at the top shows the most recent revision. Questions can be sent through BRKOUT Support or the contact information published in the Service.