Second Innings Cookie and Tracking Technologies Policy
Second Innings, Inc.
Last updated November 1, 2026
1. ABOUT THIS POLICY
1.1 This Cookie and Tracking Technologies Policy explains how Second Innings, Inc. ("Second Innings," "we," "us," or "our") and our partners use cookies, pixels, software development kits ("SDKs"), device identifiers, and similar technologies (together, "Tracking Technologies") on the website at secondinnings.app and its subdomains, in the Second Innings mobile applications, and in our emails, all of which are part of the "Services" as defined in our Terms of Service.
1.2 This policy is part of our Privacy Policy (secondinnings.app/privacy-policy). Capitalized terms not defined here have the meanings given in the Privacy Policy or the Terms of Service. The Privacy Policy explains how we use the personal information collected through Tracking Technologies, our legal bases, how long we keep information, and your privacy rights.
2. WHAT THESE TECHNOLOGIES ARE
- Cookies are small text files that a website stores in your browser. "First-party" cookies are set by us; "third-party" cookies are set by another company, such as an analytics or advertising partner. "Session" cookies are deleted when you close your browser; "persistent" cookies remain until they expire or you delete them.
- Local storage and similar browser storage let a website store information in your browser, much like a cookie.
- Pixels, tags, and web beacons are small pieces of code or images on a web page or in an email that send information to us or a partner when the page or email loads or when you take an action, such as clicking a link.
- Tag managers load and control pixels and tags on our website.
- SDKs are pieces of code from us or a partner built into our mobile apps that provide functions such as push notifications, sign-in, analytics, crash reporting, ads, and measurement, and that may collect information from your device.
- Device and advertising identifiers are identifiers associated with your device, such as the Apple Identifier for Advertisers ("IDFA"), the Google advertising ID, the Android ID, app installation identifiers, and push tokens.
- Server logs record information our servers receive with each request, such as your IP address, user agent, and the time and content of the request.
3. CATEGORIES OF TRACKING TECHNOLOGIES
We group Tracking Technologies into three categories:
| Category | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary and functional | Makes the Services work and keeps them secure: sign-in, one-time codes, push delivery, purchases, fraud and bot prevention, app integrity checks, remembering your settings and privacy choices, and load balancing | Not through our settings, because the Services cannot work without them. You can block cookies in your browser, but parts of the Services may not work |
| Analytics and performance | Helps us understand how the Services are used, count visits and installs, measure feature use, and find and fix crashes, errors, and slow performance | Yes, as described in Sections 6 to 9, subject to the features your device or browser offers |
| Advertising and marketing | Shows ads in free experiences of the app, measures the effectiveness of our ads and campaigns, attributes app installs and sign-ups to campaigns, and helps show our ads to you and similar people on other websites, apps, and platforms | Yes, as described in Sections 6 to 9 |
4. TRACKING TECHNOLOGIES ON OUR WEBSITE
The list below describes the main Tracking Technologies used on our website. Partners and the specific cookies they set may change over time, and partners may set additional cookies under their own policies.
| Technology | Provider | Category | Purpose |
|---|---|---|---|
| Cookie preference cookie ("cookieConsent") | Second Innings (first party) | Strictly necessary | Remembers the choice you make in our cookie banner |
| Browser storage identifier for blog features | Second Innings (first party) | Strictly necessary and functional | A random identifier stored in your browser and sent with blog views and reactions, so we can record likes and dislikes and count views |
| Hosting and security logs | Second Innings and our hosting providers | Strictly necessary | Delivering pages, security, and preventing abuse |
| Google Tag Manager | Strictly necessary (tag delivery) | Loads and manages the other tags listed here | |
| Google Analytics | Analytics and performance | Measures visits, pages viewed, traffic sources, clicks on app store links, and other interactions | |
| Firebase Analytics (where enabled) | Analytics and performance | Measures clicks on app store links and page paths | |
| Google Ads conversion tracking, conversion linker, and remarketing | Advertising and marketing | Measures conversions from our Google ads and lets us show our ads to people who have visited our website | |
| Meta Pixel | Meta Platforms | Advertising and marketing | Measures page views and actions on our website (for example, viewing our app store links) for our Meta advertising, and helps show our ads on Meta platforms |
| TikTok Pixel | TikTok | Advertising and marketing | Measures page views and actions on our website for our TikTok advertising, and helps show our ads on TikTok |
| AppsFlyer Smart Script and OneLink | AppsFlyer | Advertising and marketing | Reads campaign parameters in links (such as source, campaign, channel, and ad) to attribute app installs and sign-ups to marketing campaigns |
| Vibe pixel | Vibe | Advertising and marketing | Measures visits and actions on our website for our streaming and connected-TV advertising |
| Google Fonts (on some landing pages) | Strictly necessary and functional | Delivers web fonts. Your browser connects to Google's servers, which receive your IP address |
Website tags may receive information such as your IP address, browser and device type, the page URL and referring URL, the time of your visit, the actions you take on the page, campaign parameters in links, and identifiers stored in cookies or browser storage.
5. TRACKING TECHNOLOGIES IN OUR APPS
Our apps do not use browser cookies in the usual sense, but they use SDKs, device identifiers, and on-device storage that serve similar purposes. The main SDKs and services are:
| SDK or service | Provider | Category | Purpose |
|---|---|---|---|
| Secure on-device storage and local database | Second Innings | Strictly necessary and functional | Stores your sign-in token, settings, privacy choices, a persistent device identifier, cached profiles, and your message and AI Companion history on your device, with message content and sensitive settings encrypted |
| Persistent device identifier | Second Innings | Strictly necessary | Identifies your device for security, fraud prevention, and enforcing bans. On iOS, it is stored in your device keychain and may persist after the app is deleted |
| Firebase Cloud Messaging and Apple Push Notification service | Google, Apple | Strictly necessary | Delivers push notifications |
| Firebase Installations | Strictly necessary | Identifies app installations for Firebase services | |
| Firebase App Check, Play Integrity, App Attest, and DeviceCheck | Google, Apple | Strictly necessary | Confirms that requests come from a genuine app on a genuine device |
| reCAPTCHA (where used) | Strictly necessary | Detects bots and abuse when you sign in or request a one-time code | |
| Sign in with Apple, Google Sign-In, Firebase Authentication, Facebook Login | Apple, Google, Meta | Strictly necessary (when you choose them) | Lets you sign in with an existing account |
| Google Play Billing and Apple StoreKit | Google, Apple | Strictly necessary | Processes purchases and subscriptions |
| Google Play Age Signals and Apple Declared Age Range | Google, Apple | Strictly necessary | Provides age signals from your device or store account for age assurance |
| Google ML Kit Face Detection | Strictly necessary (verification) | Detects faces, blinks, smiles, and head movement on your device during liveness checks. The model runs on your device | |
| In-App Review | Google, Apple | Functional | Shows the app store's review prompt |
| Google Maps Platform (Places, Geocoding) | Functional | City and birthplace search and converting coordinates to an address | |
| Our own session, screen, and diagnostics reporting | Second Innings | Analytics and performance | Records sessions and the screens you visit, campaign and pop-up interactions, crashes, and failed requests (with credentials and contact details redacted) |
| Firebase Analytics (Google Analytics for Firebase) | Analytics and performance | Measures app use, screen views, registrations, profile completion, subscriptions, and purchases. May use your advertising identifier where your device settings allow | |
| Firebase Crashlytics | Analytics and performance | Crash reporting | |
| Firebase Performance Monitoring | Analytics and performance | Measures app and network performance (network traces record the address and path of requests, not query strings) | |
| Google Mobile Ads SDK (AdMob) and Google User Messaging Platform (iOS) | Advertising and marketing | Shows ads in free experiences of the iOS app, measures them, and collects and stores your ad consent choices where required | |
| InMobi SDK (Android) | InMobi | Advertising and marketing | Shows ads in free experiences of the Android app and measures them |
| Meta App Events (Facebook SDK) | Meta Platforms | Advertising and marketing | Measures app installs, registrations, subscriptions, and purchases from our Meta advertising, and helps Meta show our ads |
| Google measurement and SKAdNetwork | Google, Apple | Advertising and marketing | Measures conversions from our ads, including through Apple's privacy-preserving attribution framework |
App SDKs may receive information such as device and advertising identifiers, IP address, device model and operating system, app version, app events and their parameters (for example, a subscription's product, price, and currency), and information about your interactions with ads.
6. CONSENT BANNER AND COOKIE SETTINGS (WEBSITE)
6.1 Banner. When you visit our website, we may show a cookie banner that explains our use of Tracking Technologies and lets you allow all optional Tracking Technologies or open Cookie Settings to review your preferences. In Cookie Settings, you can see the categories described in Section 3 and choose whether to allow the optional categories (analytics and performance, and advertising and marketing). Strictly necessary technologies are always active.
6.2 Saving your choice. Your choice is stored in the "cookieConsent" cookie for up to 180 days, after which we may ask you again. If you clear your cookies or use a different browser or device, we may ask you again.
6.3 Changing your choice. You can change your choice at any time by deleting the "cookieConsent" cookie in your browser and returning to our website, by using Cookie Settings where it is offered, or by contacting privacy@secondinnings.app.
6.4 Other controls. Some Tracking Technologies on our website may load when a page first loads. To limit them reliably, you can also use your browser settings, a Global Privacy Control signal (Section 7), and the opt-out tools in Section 9, which work in addition to the banner.
7. GLOBAL PRIVACY CONTROL AND DO NOT SELL OR SHARE
7.1 Global Privacy Control. We treat a Global Privacy Control ("GPC") signal that we detect from your browser on our website as a valid request to opt out of the sale or sharing of personal information and of targeted advertising for that browser. GPC is a setting available in some browsers and extensions. Learn more at globalprivacycontrol.org.
7.2 In the app. GPC is a browser signal and does not reach our apps. To opt out in the app, go to Settings > Your Privacy Choices > Do Not Sell or Share My Personal Information. When it is on, we request non-personalized ads and restricted data processing from Google AdMob, send an opt-out signal to InMobi, and enable Meta's Limited Data Use for app events. Your choice is saved to your account, so it applies on other devices where you sign in.
7.3 Do Not Track. We do not respond to "Do Not Track" browser signals, because there is no common standard for them. We do respond to GPC as described above.
7.4 What opting out does. Opting out does not stop ads or all Tracking Technologies. You may still see ads that are not personalized, and we and our partners may still use Tracking Technologies for strictly necessary purposes, analytics, frequency capping, security, and aggregate measurement. See Section 9 of the Privacy Policy.
8. MOBILE ADVERTISING IDENTIFIERS
8.1 iOS (IDFA and App Tracking Transparency). On iOS, apps must ask for your permission through Apple's App Tracking Transparency ("ATT") prompt before accessing the IDFA or tracking you across other companies' apps and websites. Our app shows this prompt. If you do not allow tracking, our app and our partners' SDKs do not receive your IDFA, and Meta's SDK applies your choice to app events. You can change your choice at any time in Settings > Privacy & Security > Tracking on your iPhone, or turn off "Allow Apps to Request to Track" for all apps.
8.2 Android (advertising ID). On Android, Google Play services provides an advertising ID that apps and SDKs may use for advertising and analytics. You can reset or delete your advertising ID in your device settings (on most devices, Settings > Google > Ads or Settings > Privacy > Ads). When the advertising ID is deleted, apps receive an identifier of zeros instead.
8.3 Ad consent in the EEA, UK, and Switzerland. Where required, the app asks for your consent to personalized advertising through Google's consent form before ads are requested, and passes your choice to our advertising partners. Where that option is shown, you can review your choice at Settings > Your Privacy Choices > Manage ad consent.
8.4 Other identifiers. We also use device identifiers that are not advertising identifiers, such as the Android ID, an identifier stored in your iOS keychain, app installation identifiers, and push tokens, for strictly necessary purposes such as security, fraud prevention, push delivery, and enforcing bans. These are not affected by your advertising settings.
9. HOW TO OPT OUT AND OTHER CHOICES
You can use one or more of the following controls. Some work only on the browser or device where you set them, and some must be set again if you clear cookies or change devices.
- Our controls: the cookie banner and Cookie Settings on our website (Section 6), GPC (Section 7.1), and the in-app Your Privacy Choices settings (Sections 7.2 and 8.3).
- Browser controls: most browsers let you block or delete cookies and site data, block third-party cookies, or browse privately. See your browser's help pages.
- Device controls: iOS tracking and Android advertising ID settings (Section 8), and app permission settings for location, camera, photos, and notifications.
- Industry opt-out tools: the Digital Advertising Alliance (optout.aboutads.info and the AppChoices app), the Network Advertising Initiative (optout.networkadvertising.org), and in Europe, the European Interactive Digital Advertising Alliance (youronlinechoices.eu). These tools apply only to participating companies.
- Partner controls: Google (adssettings.google.com and tools.google.com/dlpage/gaoptout for Google Analytics), Meta (your ad preferences in Meta's Accounts Center), and TikTok (ad settings in your TikTok account). These are offered by those companies under their own terms.
- Email: most email programs let you block images, which stops email pixels from loading.
If you block or delete Tracking Technologies, some parts of the Services may not work as intended, and you may still see ads that are not personalized.
10. EMAILS
Our emails may contain pixels and tracked links that tell us whether an email was delivered and opened and which links were clicked, so that we can measure and improve our communications and confirm delivery. You can limit this by blocking images in your email program. Marketing emails include an unsubscribe link, and you can turn marketing off in the app (see Section 17 of the Privacy Policy).
11. HOW LONG TRACKING TECHNOLOGIES LAST
Session cookies last until you close your browser. Persistent cookies and browser storage last for a set period, which for the technologies we use generally ranges from a few minutes to about two years, unless you delete them sooner. Our "cookieConsent" cookie lasts up to 180 days. Our blog browser storage identifier lasts until you clear your browser storage. Identifiers stored by SDKs in our apps generally last until you delete the app, reset the identifier, or clear app data, except that the iOS keychain identifier described in Section 8.4 may persist after the app is deleted. Information collected through Tracking Technologies is kept as described in Section 11 of the Privacy Policy and, for our partners, under their own retention policies.
12. THIRD-PARTY PRACTICES
Partners that set Tracking Technologies through the Services may collect information directly, combine it with information from other sources, and use it for their own purposes under their own terms and privacy policies. We do not control them. Please review the privacy policies of Google, Meta, TikTok, InMobi, AppsFlyer, and Vibe for more information.
13. CHANGES TO THIS POLICY
We may update this policy from time to time, including when we add, change, or remove Tracking Technologies or partners. We will post the updated version on our website and update the "Last Updated" date. Material changes will be handled as described in Section 20 of the Privacy Policy.
14. CONTACT US
Questions about this policy or requests about your choices: privacy@secondinnings.app
Second Innings, Inc., Attn: Privacy, 9206 Sunshine Pl, Downey, CA 90240, USA