1. What we use
Most Toolember tools work without any cookies. We use cookies and similar browser storage only where needed, in these categories:
- Essential (sign-in): when you sign in, a secure session cookie (
better-auth.session_token, HttpOnly, Secure, SameSite=Lax) keeps you logged in. It is scoped to.toolember.comso the same sign-in works on our subdomains. A short-lived cookie is also set during the sign-in redirect itself to protect against cross-site request forgery. These cannot be turned off without breaking sign-in. - Essential (Dynamic QR): the tool stores your codes in your browser's local storage under
toolember_dynamic_qr, including the secret edit key that proves a code created without an account is yours. Clearing your site data deletes that key: the code keeps redirecting, but you can no longer edit it unless it was claimed by an account. A related key remembers which account last used this browser, andthemeremembers light or dark mode. - Analytics (consent required in the EEA/UK/CH, opt-out elsewhere): Google Analytics 4 helps us understand usage (pages, performance). New Relic measures load speed and JavaScript errors. We used Microsoft Clarity, which recorded individual sessions, until 21 September 2026; it is gone and nothing has replaced it, so no part of this site records your session. See our Privacy Policy.
- Advertising: the Google AdSense script may set cookies, though no ads are being served at present. If you accept, ads may be personalized. If you reject, ads may still appear but as Google's limited ads: no personalization and no advertising cookies, apart from storage Google uses to detect fraud and invalid traffic.
- Operational: a cookie named
tlm_internalis set only for our own office IP address, so our own visits are excluded from analytics. Ordinary visitors never receive it.
2. Your choice
In the EEA, the UK and Switzerland, everything marked “consent required” above waits for you: we ask on your first visit and load none of those scripts until you answer, with rejecting exactly as easy as accepting. Everywhere else those countries work on an opt-out basis, so the scripts start on your first visit and we show you a notice saying so, with this page one click away. The off switch below is the same either way. Your answer is remembered in your browser under tlm_consent, and you can change it whenever you like:
Rejecting means the analytics and session-recording scripts are never loaded, so they never get to set a cookie. If you accepted earlier and change your mind, rejecting also deletes the analytics cookies already set on this domain (_ga, _clck and the like), and Google's tags return to the storage-denied mode of Consent Mode v2. Cookies those providers set on their own domains are outside our reach, and your browser settings are the way to clear those. Ads are the one exception: they may still be served after you reject, in Google's limited-ads mode described above.
You can also block or delete cookies in your browser settings; essential sign-in cookies will simply stop you staying logged in. To keep analytics off permanently on this device regardless of the banner, visit toolember.com/?noga=1; ?noga=0 undoes it.
3. Third parties
Cookies set by third parties (Google, Microsoft) are governed by their own policies. The services we rely on are listed on our Sub-processors page.