Cookies1. What this policy covers
This Cookie Policy explains how ToolDrop uses cookies, local storage, session storage, pixels, tags, and similar browser technologies on the ToolDrop Service. A cookie is a small value a website asks your browser to store. Local and session storage are browser-managed areas that serve similar purposes without being sent with every request.
Some storage is necessary to sign you in, protect requests, complete billing, remember an action you requested, or retain your privacy choice. Optional analytics and advertising storage is disabled until your choice allows it.
2. Storage categories
Essential and requested preferences
This category is always active because it supports authentication, security, fraud prevention, load balancing, billing flows, privacy preferences, and interface choices you request. Blocking it at the browser level may prevent sign-in or other parts of ToolDrop from working.
Analytics
When permitted, analytics helps us understand visits, navigation, conversion funnels, feature adoption, errors, and performance. We use it to improve ToolDrop rather than to expose Customer Content. Sensitive fields, source bundles, secrets, and customer app contents must not be captured by analytics.
Advertising
When permitted, advertising storage helps attribute visits and conversions to campaigns, limit repetition, measure performance, and support advertising personalization where configured. Advertising is a separate choice from analytics.
3. Current ToolDrop storage
| Technology | Purpose | Typical duration | Category |
|---|---|---|---|
| Clerk authentication cookies and storage | Sign-in, session continuity, organization selection, bot/abuse protection, and account security. Exact names can change as Clerk updates its service. | Session or persistent, depending on sign-in and security settings | Essential |
td.sidebar | Remembers whether you collapsed the ToolDrop workspace sidebar. | Up to 1 year | Requested preference |
td.theme | Remembers a light or dark theme choice. If absent, ToolDrop follows the device setting. | Until removed | Requested preference |
td.consent | Stores optional analytics and advertising choices, their version, and the time selected. | Up to 180 days, then we ask again | Essential |
| Workspace convenience storage | Remembers requested interface details such as focus-button location, recent workspaces, or a local projects directory. | Until removed | Requested preference |
| Pending-action session storage | Keeps a draft invite, share action, or checkout-related handoff in the current browser tab. | Until the tab/session ends or the action completes | Essential/requested |
| Google Tag Manager and configured analytics | Loads configured measurement tags and records permitted analytics events. The GTM container itself is not loaded until analytics or advertising consent exists. | Provider- and configuration-dependent | Analytics or advertising |
We update this table as the Service changes. Browser developer tools may show additional short-lived security, hosting, or provider values whose names are generated dynamically.
4. Third-party pages and services
When you sign in, pay through Stripe, open a connected provider, or follow a third-party link, that provider may use its own cookies under its own policy. ToolDrop cannot read cookies scoped to another provider's domain. Workspace apps and external integrations may also use storage based on their own code and instructions; workspace administrators are responsible for those technologies.
5. Change or withdraw your choice
Use the button below—or “Cookie settings” in the site footer—to accept, reject, or change optional categories. Rejecting optional storage does not block the core Service. Withdrawing consent sends updated denied signals to configured Google tags; already aggregated reporting and records we must keep are not retroactively deleted.
You can also clear site data in your browser. If you clear td.consent, use another device/browser, or return after 180 days, ToolDrop asks again. Browser-level blocking may also remove requested preferences or prevent essential authentication.
6. Global Privacy Control and Do Not Track
When the browser exposes a recognized Global Privacy Control signal, ToolDrop keeps advertising storage, ad user data, and ad personalization denied in this consent interface. General “Do Not Track” signals are not consistently standardized across services; use Cookie settings for a direct choice. We may expand recognized signals as standards and legal requirements evolve.
7. Changes and contact
We may update this policy when technologies or legal requirements change. Material changes will be highlighted when appropriate. For questions, email support@tooldrop.app or review the Privacy Policy.