Cookie Policy
The cookies and browser storage TocToc AI uses, what each one is for and how to control them.
Last updated
Toc toc, who's there? A few small cookies. This page lists every cookie and browser storage item toctocai.org uses, so you know exactly what is stored on your device.
What cookies are
Cookies are small text files that a website saves in your browser. "Local storage" and "session storage" are similar browser features. Some are needed for the site to work; others help us understand how the site is used.
Cookies we always use (strictly necessary)
These are needed for sign-in, security and checkout. They cannot be switched off without breaking the site.
| Name | Purpose | Duration |
|---|---|---|
better-auth.session_token and related better-auth.* cookies | Keep you signed in and protect your account | 7 days, renewed while you stay active; removed when you sign out |
PARAGLIDE_LOCALE | Remembers the site language | 1 year |
| Theme preference (local storage) | Remembers light or dark mode | Until you clear it |
Cookies that remember how you found us
| Name | Purpose | Duration |
|---|---|---|
signup_attribution | Records the first page you landed on, the referring site and any UTM campaign tags, so that if you sign up we know which channel brought you | 30 days |
Analytics cookies (optional)
When enabled, these tools measure visits and usage in aggregate:
| Provider | Cookies | Purpose |
|---|---|---|
| Plausible | None (cookieless) | Privacy-friendly page view statistics |
| Google Analytics | _ga, _ga_* | Visits, traffic sources and conversions |
| Microsoft Clarity | _clck, _clsk, CLID | Anonymous heatmaps and session insights to improve the design |
Where the law requires it, these run only with your consent.
Session storage
- Generator draft (
toctoc-workbench-draft): if you upload a photo and then sign in or buy credits, your photo and choices are kept in your browser's session storage so they are waiting for you when you come back. It is deleted as soon as it is restored or when you close the tab, and it never leaves your device.
Third-party pages
Checkout happens on Waffo's secure payment page, and "Sign in with Google" uses Google's page. Those services set their own cookies under their own policies.
Managing cookies
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in from working. Most browsers also offer private windows that delete cookies when closed.
Questions
Write to support@toctocai.org or use the contact page. See also our Privacy Policy.