Cookie Policy

Cookies are small files a website asks your browser to keep. Related technologies do the same job by other means: local storage, pixels (a one-pixel image whose only purpose is to tell a company you loaded a page), and tags (a script a third party runs on our page). This policy covers all of them, and calls them all cookies for short.

This policy covers tore.ai and the Tore application. Help centers and portals we host on behalf of our customers are covered separately at the end.

What is actually running today

This site loads Google Analytics 4 with Google Consent Mode. Advertising tags from Meta, TikTok, X, LinkedIn and Google Ads load only when the advertising consent gate permits them. A saved decline, advertising opt-out or Global Privacy Control blocks advertising.

The four categories

How the consent choice works

Before you choose anything

Google’s region-scoped defaults deny analytics and advertising storage in the EEA, UK and Switzerland; the default elsewhere is granted. Before any Google configuration runs, our code overrides the advertising signals to denied whenever our advertising gate blocks the tags. Google Analytics still loads and may send cookieless pings when analytics storage is denied. Declining prevents analytics cookie storage rather than stopping all requests to Google.

Our advertising gate and consent banner share one region decision. We require a choice if the region cookie indicates the EEA, UK or Switzerland, if that cookie is missing or unreadable, or if the browser timezone is on our consent list, ambiguous or unresolvable. Only an explicit outside-region cookie together with a resolvable timezone outside that list allows advertising without a prior choice. US visitors who meet both conditions can opt out using the footer link.

What you are asked

The banner appears in this consent zone when you have no valid stored choice and no Global Privacy Control signal. Accept grants analytics and advertising consent, unless you have opted out of advertising. Decline denies both. Accept and Decline each take one click. Accept loads permitted advertising tags immediately without a reload.

Where your choice is recorded

Your answer is stored in your browser’s local storage under codas_consent_v1 as a JSON record of analytics_storage, ad_storage, ad_user_data, ad_personalization, a version marker and a timestamp. Earlier analytics-only choices still apply to analytics. An earlier acceptance does not grant advertising consent: we ask again in the consent zone, while outside it the usual no-choice advertising rule applies. An earlier decline keeps advertising off everywhere without showing the banner again. The record stays in your browser; its consent signals are sent to Google.

A choice applies per browser and device, including after travel. If local storage is blocked, your choice applies to the current page but cannot be remembered for later visits. Clearing site data removes saved choices and opt-outs; the region and timezone defaults then apply on later page loads. Clearing storage or accepting in another tab does not grant consent in an already open tab.

Changing your mind

Use Do not sell or share my personal information, also available in every public page’s footer, to opt out of advertising. It denies Google advertising signals, requests consent revocation from Meta and TikTok if their tags have loaded, saves the opt-out and reloads the page to stop already loaded tags. It does not change your analytics choice. A confirmation appears once after that reload if your browser allows session storage.

If local storage is blocked, we apply the opt-out on this page and show the confirmation immediately without reloading. Already loaded tags may remain, and the opt-out cannot be remembered. Use Turn off analytics cookies to deny analytics storage and advertising consent as well. This control revokes advertising consent and, if advertising tags have loaded and the choice was saved, reloads to stop them. If the choice cannot be saved, it applies on this page without reloading.

Withdrawing consent does not erase information already collected. Google Analytics may still send cookieless pings. For deletion requests, see the privacy policy.

Global Privacy Control

A boolean Global Privacy Control (GPC) signal from your browser always blocks advertising, even with a saved acceptance. We also save an advertising opt-out when storage is available, so it continues to apply on later visits. With GPC and no valid saved analytics choice, analytics storage is also denied and the banner is hidden. With a saved analytics choice, analytics follows that choice; advertising remains denied.

US state opt-out rights

If you live in a US state with a consumer privacy law, that law gives you the right to opt out of targeted advertising, of the sale of personal information, and of sharing for cross-context behavioral advertising. Those states currently include California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. If your state has such a law and is not on that list, we will honor it anyway.

We do not sell personal information and never have. However, when an advertising tag lets Meta, TikTok, X, LinkedIn or Google Ads receive an identifier for your browser so we can show you our own ads elsewhere, several of those state laws count that as sharing for cross-context behavioral advertising and as targeted advertising. We disclose it plainly rather than argue about the definition.

You can exercise the opt-out in any of these ways:

• Use the “Do not sell or share my personal information” link above or in the footer, enable Global Privacy Control, or decline on the consent dialog when it is shown.
• Block analytics requests using your browser’s tracking prevention if you also want to prevent cookieless pings.
• Email privacy@codaslabs.com, which works whether or not a dialog is showing.

We will not treat you differently, charge you more, or give you a worse version of the site because you opted out. You may use an authorized agent to opt out for you. If we refuse a request, you can appeal it, and the privacy policy explains how.

This section is about our marketing website only. It never applies to anything inside the product. Support conversations, bug captures and customer content are never used for advertising, never sent to an advertising provider, and never used to target anyone.

Advertising, and who gets what

When advertising is allowed, Meta, TikTok, X, LinkedIn and Google Ads may receive page views, page URLs, cookie and device identifiers, and technical information such as IP address and browser type to measure our advertising and retarget visitors with Tore ads.

Confirmed waitlist signups emit sign_up to Google Analytics with the form name and no email address. When advertising is allowed, Meta and TikTok also receive CompleteRegistration. The integration supports generate_lead as Meta Lead and TikTok SubmitForm, but there is currently no contact or demo form that emits it. Meta receives only the form name with these events; TikTok receives no form parameters. X and LinkedIn do not receive these conversion calls from our code. Google Ads is configured for remarketing without conversion labels.

Our code passes no contact details to the tags. When advertising and dashboard-controlled automatic matching are enabled, Meta, TikTok and Google tags may detect form information such as an email address, hash it in the browser and use it for matching. Selected automatic collection features are disabled in Meta and TikTok; X automatic matching, automatic configuration and data-layer tracking are disabled in code.

What we set, and for how long

Analytics cookie storage follows Google’s regional defaults and your saved choice, with GPC denying it when no valid choice is stored. Advertising cookies may be set only after our gate permits the tags to load. Actual cookie use and expiry depend on the provider and your browser.

Refusing or removing cookies

Every browser lets you block or delete cookies and clear local storage in its settings, usually under privacy or site data, and most offer tracking prevention that blocks third-party advertising cookies by default. Deleting this site’s data also deletes your consent choice and advertising opt-out. On later page loads, the consent gate applies again: it asks in the consent zone, while outside it analytics and advertising can be granted by default unless GPC is enabled.

Blocking the strictly necessary category will stop you from signing in. That is not us being awkward: those cookies are how the site knows the request is yours.

Help centers and portals we host for customers

When one of our customers runs their help center or feedback portal on Tore, those pages use only the strictly necessary and preference categories: enough to keep a session and remember a small choice. We do not run our own analytics or advertising tags on a customer’s portal, and we do not use visitors to a customer’s help center to advertise anything, to them or to anyone else. If a customer adds their own analytics to their portal, that is their decision, disclosed under their own privacy policy, and this policy does not cover it.

Changes to this policy

We will update this page when what we set changes, and always before a new category or a new provider starts, not after. The date at the top changes with it. The consent behavior and storage keys in use are described above.

More

For everything else we do with information, see the privacy policy, and for the companies involved in running Tore, the subprocessor list. Questions to privacy@codaslabs.com.