Cookie Policy
Effective Date: 13 June 2026 Last Updated: 13 June 2026
Quick summary
Before the details, here's what this document says in plain English:
- ToolBody uses cookies and similar browser-storage technologies to make the site work, to understand how it's used in aggregate, and to deliver advertising (we use Google AdSense).
- Essential things — like remembering your invoice draft in your browser — happen without asking, because the site can't work otherwise.
- Analytics and advertising cookies are non-essential. If you're in a region where consent is required (EU, UK, others), you'll see a consent banner on your first visit where you can accept, reject, or adjust.
- You can change your cookie preferences anytime via your browser settings or our consent banner.
- We don't sell your data. The full Privacy Policy has more detail.
The full policy follows.
1. About this Cookie Policy
This Cookie Policy explains how ToolBody ("ToolBody", "we", "us") uses cookies and similar technologies on the website at https://toolbody.cloud. It supplements (and should be read alongside) our Privacy Policy.
The structure follows the requirements of the EU/UK GDPR, the EU ePrivacy Directive, the UAE Personal Data Protection Law, and the disclosure requirements of advertising programs we use (notably Google AdSense).
2. What cookies are (and what they're not)
Cookies
Cookies are small text files that websites store on your device through your browser. They typically contain a short identifier (e.g., a session ID) that lets the website remember who you are between page loads, what your preferences are, or that you've seen a particular notice before.
Cookies are categorised by:
- First-party vs third-party — first-party cookies are set by the domain you're visiting (toolbody.cloud). Third-party cookies are set by other domains (e.g., Google's domains for advertising and analytics).
- Session vs persistent — session cookies are deleted when you close your browser. Persistent cookies stay until they expire or you delete them.
- Essential vs non-essential — essential cookies are needed for the site to function. Non-essential cookies enable extras like analytics or advertising.
Other browser-storage technologies
The legal rules around cookies also apply to similar technologies that store data on your device — including localStorage, sessionStorage, and IndexedDB. ToolBody uses these for some essential functions (notably, saving your invoice or stamp draft locally in your own browser). Throughout this policy, "cookies" should be read to include these similar technologies.
Importantly — what we DON'T do with cookies
- We don't use cookies to track you across other unrelated websites (beyond what Google AdSense does, which is described in detail in Section 6).
- We don't sell cookie-derived data to data brokers.
- We don't use "fingerprinting" or other workarounds to bypass cookie consent.
3. The categories of cookies on ToolBody
3.1 Strictly necessary (essential) cookies
These cookies are required for the site to function. They cannot be disabled.
What they do on ToolBody:
- Session management — keeping track of your visit while you navigate between pages.
- Draft storage (browser storage) — when you start an invoice or stamp design, your draft is saved locally in your browser using localStorage. This is what lets you close the tab and come back to your work later. Note: this data lives on your own device, not on our servers.
- Cookie consent state — remembering whether you've already accepted, rejected, or customised your cookie preferences so we don't show the banner every time you visit.
- Security — basic security mechanisms (CSRF tokens, anti-spam markers on the contact form) that prevent abuse.
Legal basis: legitimate interests / necessary for the service. Under the ePrivacy Directive, these don't require consent because the site can't function without them.
3.2 Analytics cookies (non-essential)
These cookies help us understand how the site is used in aggregate — which pages are most visited, where users come from (search engine vs direct), and which tools are most popular. The data is anonymous; we don't see individual users' specific activity.
If analytics is enabled on the site:
- Provider: Google Analytics
- What it tracks: page views, time on page, referrer, approximate location (country-level), device type, browser type.
- What it does NOT track: your specific identity, the content of stamps/invoices/signatures you create, anything you type into editors or forms (beyond final submissions to us).
Legal basis: consent (where required). You can opt out via our cookie consent banner or your browser settings.
If we do not currently use analytics, this section is informational only and no analytics cookies are set.
3.3 Advertising cookies (non-essential)
ToolBody serves display advertising via Google AdSense. Google and its advertising partners set cookies that help deliver and measure ads.
These cookies may be used to:
- Show ads relevant to your interests, based on your visits to ToolBody and other websites.
- Limit how often you see the same ad.
- Measure ad performance.
- Prevent fraudulent ad activity.
The specific cookies set by Google AdSense include (but aren't limited to): `_gads`, `_gpi`, `IDE`, `NID`, `__Secure-3PSIDCC`, and various session and conversion cookies. The list is maintained by Google and changes over time.
Legal basis: consent (where required). In EU/UK and similar jurisdictions, these cookies are only set after you've explicitly accepted them via our cookie consent banner.
You can opt out of personalised advertising:
- Through our cookie consent banner (if shown in your region).
- Directly with Google: https://adssettings.google.com.
- Via the industry-wide opt-out tools: https://optout.aboutads.info (US) and https://www.youronlinechoices.com (EU).
4. Detailed cookie list
For the strongest compliance: this section should be a literal list of every cookie your site sets, with each cookie's name, purpose, provider, expiration, and category. Many consent platforms (Cookiebot, OneTrust, Termly) auto-scan your site and generate this list. If you're maintaining the list manually, use Chrome DevTools (F12 → Application → Cookies) to identify cookies on your site.
>
Below is a template of how the list should look. Replace the example cookies with the actual cookies your site sets.
| Cookie name | Purpose | Provider | Type | Expiration | |---|---|---|---|---| | `[cookie_consent]` | Stores your cookie preferences | ToolBody (first-party) | Essential | 1 year | | `[session_id]` | Identifies your session | ToolBody (first-party) | Essential | Session | | `[csrf_token]` | Prevents cross-site request forgery | ToolBody (first-party) | Essential | Session | | `_ga` | Google Analytics user identification | Google (third-party) | Analytics | 2 years | | `_ga_*` | Google Analytics session state | Google (third-party) | Analytics | 2 years | | `_gads` | AdSense ad-serving identifier | Google (third-party) | Advertising | 13 months | | `_gpi` | AdSense personalisation identifier | Google (third-party) | Advertising | 13 months | | `IDE` | DoubleClick advertising identifier | Google (third-party) | Advertising | 13 months | | `NID` | Google preferences | Google (third-party) | Advertising | 6 months |
The browser-storage entries used by ToolBody itself:
| Storage key | Purpose | Storage type | Expiration | |---|---|---|---| | `toolbody_invoice_draft` | Saves your invoice draft locally | localStorage | Until cleared | | `toolbody_stamp_draft` | Saves your stamp design draft locally | localStorage | Until cleared | | `toolbody_signature_draft` | Saves your signature draft locally | localStorage | Until cleared | | `toolbody_consent_state` | Remembers your cookie consent preference | localStorage | 1 year |
Important: these draft entries don't reach our servers — they exist only on your device. They're treated as "essential" because the corresponding tool can't function without them (your work would be lost between page loads).
5. How long cookies stay
- Session cookies (e.g., `session_id`, `csrf_token`) are deleted when you close your browser.
- Persistent first-party cookies typically expire within 1 year unless renewed.
- Persistent third-party cookies (analytics, advertising) expire according to the provider's policy — typically 6 months to 2 years.
- localStorage data stays until you actively clear it via browser settings, until our code overwrites it (e.g., new draft replacing old), or until your browser's storage quota is exceeded.
6. Google AdSense — detailed disclosure
This section is required by Google AdSense and provides explicit detail about how advertising cookies work on ToolBody.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to ToolBody and other websites.
- Google's use of advertising cookies enables Google and its partners to serve ads to you based on your visits to our site and other sites on the internet.
- You may opt out of personalised advertising by visiting Google's Ads Settings: https://adssettings.google.com.
- Even without personalised ads, you'll still see general ads on the site — they just won't be tailored to your interests. The ads themselves aren't disabled by opting out of personalisation.
- Google's privacy policy for advertising is available at: https://policies.google.com/technologies/ads.
We do not control which specific ads Google shows on ToolBody. We don't see what's shown to any individual user. We don't provide any user-identifying information to Google beyond what its AdSense cookies capture in the browser.
7. Managing your cookie preferences
You have several layers of control:
Via our cookie consent banner
If you're in a region where consent is required (EU, UK, and increasingly other regions), you'll see a consent banner on your first visit. You can:
- Accept all cookies — enables analytics and advertising cookies along with essential ones.
- Reject non-essential cookies — only essential cookies are set.
- Customise — choose specifically which cookie categories to allow.
You can change your decision at any time by clicking the "Cookie settings" link in the site footer (or wherever your CMS exposes this option).
Via your browser
Every major browser has cookie controls in its settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy
- Edge: Settings → Cookies and site permissions → Cookies and site data
You can block all cookies, block only third-party cookies, or delete cookies for specific sites. Blocking essential cookies on ToolBody may break parts of the site (e.g., your drafts won't be saved between sessions).
Via Google's controls (for advertising)
- Google Ads Settings: https://adssettings.google.com — directly control how Google personalises ads to you across all sites that use Google's ad systems.
- General opt-out tools: https://optout.aboutads.info (US) and https://www.youronlinechoices.com (EU).
Via "Do Not Track"
Most browsers offer a "Do Not Track" setting. Industry standards for how to honour this signal vary and the W3C standard for DNT was discontinued. As a result, we currently treat "Do Not Track" requests as a signal but cannot guarantee they prevent all third-party tracking — please use the explicit opt-out methods above for stronger control.
8. International users
If you're located in the EU, UK, EEA, or Switzerland, the EU/UK General Data Protection Regulation (GDPR) and the ePrivacy Directive apply to ToolBody's cookie practices. Our consent banner is configured to comply with these rules.
If you're located in the United Arab Emirates, the UAE Personal Data Protection Law applies. The same cookie consent mechanisms generally satisfy UAE requirements.
If you're located in the United States, applicable state privacy laws (CCPA/CPRA in California, similar laws in other states) include cookie-based "sale" or "share" provisions. You can exercise your rights via the controls above or by contacting us.
If you're elsewhere, our cookie disclosure here applies regardless of jurisdiction, but the legal frameworks vary.
9. Changes to this Cookie Policy
We may update this Cookie Policy when:
- New cookies are added to the site (e.g., a new analytics or advertising provider).
- Existing cookies change purpose, expiration, or provider.
- Applicable law changes the disclosure requirements.
When we do, we'll update the "Last Updated" date at the top of this page. For material changes — particularly the addition of significant new tracking technologies — we'll provide more prominent notice (banner, email if we have your address).
Your continued use of ToolBody after changes take effect indicates your acceptance of the updated policy.
10. Contact us
For questions about this Cookie Policy or our cookie practices:
- Email: privacy@toolbody.cloud
- Mail: the address listed in our Privacy Policy.
For general (non-cookie) inquiries, see our Contact page.