We use cookies to keep you logged in, to see how the site gets used, and to measure which ads bring people here. Every cookie we set is named below, and you can decline everything except the essential ones.
A cookie is a small text file your browser stores when you visit a site. It lets the site remember you between page loads — for example, that you're logged in. Cookies are not malware; they're just key/value pairs in a file.
Some cookies are essential (a site can't function without them). Some are convenient. Some are for tracking. We use all three — the tracking ones are named below, and you can decline them.
| Category | Required? | What it does |
|---|---|---|
| Essential | Yes | Keep you logged in, save your settings, remember language preference. |
| Preferences | Optional | Tone presets, default scan language, theme. |
| Analytics | Optional | Aggregate funnel — what pages people visit, where they drop off. Anonymized. |
| Marketing / Ads | Optional | Measuring which ads bring people here: Meta Pixel and Google Ads conversion tracking, on the marketing site. |
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
ts_session | Keeps you signed in | 30 days | Essential |
ts_anon_id | Anonymous browser ID, so the free-scan allowance can't be reset by reloading the page | 1 year | Essential |
country | Country hint from our CDN, used to pick the currency we show you | 1 hour | Essential |
__cf_bm | Cloudflare bot protection in front of our API | 30 minutes | Essential |
_ga, _ga_83KSYBQ30L | Google Analytics 4 — which pages people visit | 13 months | Analytics |
_clck | Microsoft Clarity — returning-visitor ID | 1 year | Analytics |
_clsk | Microsoft Clarity — stitches one visit's pages together | 1 day | Analytics |
ph_phc_…_posthog | PostHog device ID, and whether you opted out | 1 year | Analytics |
_fbp | Meta Pixel — which ad brought you here | 90 days | Marketing |
_gcl_au | Google Ads conversion linker | 90 days | Marketing |
We don't set any third-party cookie that isn't named in this table. Two things you might expect here are not cookies at all: your cookie choice and your interface preferences (tone preset, language, light/dark) are kept in your browser's local storage, as cookie_consent_v2 and friends.
The analytics and advertising cookies in the table above are set by Google, Microsoft and Meta on our behalf. Beyond those, the one third party that sets a cookie of its own is Stripe, during the checkout flow. They use cookies for fraud prevention (Stripe Radar). See Stripe's cookie policy. We have no control over their cookies, but we picked Stripe specifically for their privacy posture.
If you're in the EEA, the UK or Switzerland, you'll see the cookie banner on your first visit, and no analytics or marketing cookie is set until you choose. Everywhere else, analytics and marketing cookies are on by default and you can switch them off at any time. Use Cookie settings (also in the footer of every page) or, in the app, Settings → Privacy → Cookies. You can turn Analytics and Marketing on or off separately. Essential cookies can't be disabled — without them, login literally doesn't work.
Every browser lets you block or delete cookies. Here's how, by browser:
Blocking all cookies will break logged-in functionality. Blocking analytics cookies has no effect on functionality.
If we add or remove cookies, we update this page and (for any non-essential additions) re-prompt your consent. Past versions are archived here.