Skip to content
Tixo
עברית

Version 1.0 · in effect from 4 October 2026

Cookie & Storage Policy

This policy explains which cookies and which on-device storage Tixo uses, why, and how you can control them. It forms part of the Privacy Policy and the Terms of Use.

1. In short

  • We use no advertising cookies and no third-party analytics or tracking cookies. We do not sell or share data about your browsing for advertising.
  • Our website's landing page and legal pages set no cookie, and the landing page runs no script. Where our website offers the full Service, it uses a few strictly necessary cookies (sign-in, security, language) and browser storage for your preferences.
  • The iPhone and Android apps set no cookies of ours. They keep your records and preferences in storage on your phone, and your sign-in token in the phone's secure store.

2. Cookies set by our website

These cookies are set only where our website offers the full Service — the catalogue, sign-in and your records:

  • Sign-in cookie (.AspNetCore.Identity.Application). Keeps you signed in. Strictly necessary. Expires after 24 hours or when you sign out. Marked HttpOnly and SameSite=Lax, so scripts and other sites cannot read it.
  • Visitor cookie (tixo_guest). A random identifier that lets a signed-out visitor's records, such as "My tickets", be found again on our server and moved into the account when the visitor signs in. It is not an analytics identifier. Strictly necessary. Deleted when the browser closes or when you sign in.
  • Pending sign-up cookie (.Tixo.Verify). Holds a sign-up or sign-in, encrypted, between the form and the page where you type the code we e-mailed you, so that your password never appears in a web address. Sent only to our sign-in pages and never with requests from other sites. Expires after 30 minutes, when the browser closes, or as soon as you are signed in.
  • Anti-forgery cookie (.AspNetCore.Antiforgery.*). Protects forms against cross-site request forgery. Strictly necessary.
  • External sign-in cookies (.AspNetCore.Correlation.*, Identity.External). Used only for the moments a Google sign-in takes, to complete it securely; removed when it completes.
  • Language cookie (app_language). Remembers whether you chose Hebrew or English, so that the page is served in your language from the first moment. Functional. Kept for one year.
  • Interactive session. The live connection between your browser and our server uses a connection identifier held in memory for the duration of the visit, not a persistent cookie.

3. Browser storage (localStorage)

Where our website offers the full Service, it keeps your preferences in your browser's local storage — such as your theme (app_theme: light, dark or your device's setting), your language and whether you have seen the guided tour — and none of it is sent to third parties. Your records, such as saved shows, follows and "My tickets", are kept on our server, in a folder for your account or, before you sign in, for your visitor cookie (see the Privacy Policy). You can clear browser storage in your browser's site-data settings; that resets preferences only, and does not delete your account or the records kept for it.

4. On-device storage in the apps

  • Your records. Your "My tickets" records, saved shows, follows, "interested" and "going" marks, ratings, saved searches, taste settings, notifications, recently viewed shows and recent searches, and your city are stored as files in the app's private storage on your phone. They are not sent to us. Settings → "Clear local data" removes them.
  • Preferences. Your language and theme, whether you have seen the guided tour and which version of these documents you accepted are kept in the app's own storage on your phone.
  • Secure store (iPhone Keychain / Android Keystore). Your Tixo sign-in token, which the operating system protects with encryption. It is removed when you sign out.
  • Usage and error reports. Whether the reports are on, a random installation identifier and any crash report not yet sent. Switching the reports off, or "Clear local data", deletes unsent crash reports and replaces the identifier.
  • Catalogue. A copy of the catalogue of shows, sellers and prices — no personal information — downloaded from our server so that the app works quickly and without a connection.
  • The window that opens a seller's page. When you continue to a seller, the seller's page sets its own cookies and storage inside that window, under the seller's own policy. We do not read them.

5. Requests to third parties

The apps, and our website where it offers the full Service, load a font from Google Fonts, an icon font from jsDelivr, and pictures of shows and sellers' logos from the sellers' own servers or the services that host their pictures; our website's landing page loads only the font. Like any web server, these providers see your IP address and standard request headers; they do not receive your identity or account details from us, and pictures are requested without telling their servers which screen you are on. When you continue with Google, the sign-in runs in a browser window: Google sets its own cookies there, under Google's policy, and our server sets the short-lived external sign-in cookies described in section 2. A seller's page, and a map, messaging or calendar app you open from a show, set their own cookies and storage under their own policies.

6. Your choices

Your browser lets you block or delete cookies and site data; blocking the strictly necessary cookies will prevent you from signing in to our website. In the apps, Settings → "Clear history" forgets the shows you viewed and your recent searches, Settings → "Clear local data" removes your records from the phone, Settings → "Usage and error reports" switches the reports off, and deleting your account removes what is tied to it (see Account & Data Deletion). Because we do not track you, we do not currently act on "Do Not Track" or Global Privacy Control signals — there is nothing to switch off.

7. Changes

We may update this policy as the Service changes. The version and effective date appear at the top of the page; the current version is always at https://tixo.co.il/en/legal/cookies. In case of any inconsistency between the Hebrew and English versions, the Hebrew version prevails.