Cookie Policy

Cookies are small files a website asks your browser to keep. Related technologies do the same job by other means: local storage, pixels (a one-pixel image whose only purpose is to tell a company you loaded a page), and tags (a script a third party runs on our page). This policy covers all of them, and calls them all cookies for short.

This policy covers tore.ai and the Tore application. Help centers and portals we host on behalf of our customers are covered separately at the end.

What is actually running today

This site loads Google Analytics 4; no advertising tags are live. Google receives pageview information, subject to the consent settings described below.

The advertising setup described on this page has not yet been turned on. The advertising row marked “Not yet switched on” reflects that current state, and this page will be updated before advertising starts.

The four categories

How the consent choice works

Google’s consent signals are initialized before Google Analytics loads, using the regional defaults described below.

Before you choose anything

In the EEA, UK and Switzerland, analytics_storage starts denied; elsewhere it starts granted. The advertising signals, ad_storage, ad_user_data and ad_personalization, start denied everywhere and remain denied when you accept. Google Analytics loads in all regions and can send cookieless pings while analytics storage is denied; declining prevents analytics cookie storage rather than stopping all requests to Google. A stored choice is applied before Google Analytics is configured.

What you are asked

In the EEA, UK and Switzerland, you are asked on your first visit without a stored choice, in a dialog that does not block the page; elsewhere no banner appears. Accepting and declining are presented as equally weighted choices: declining is one click, not a hunt through a settings panel, and there is no pre-ticked box anywhere in it.

The current choice controls analytics cookie storage only: accepting grants it and declining denies it. Advertising consent remains denied either way, and no advertising tags are loaded.

Where your choice is recorded

Your answer is stored in your browser’s local storage under the key codas_consent_v1, together with the four signals above and a timestamp of when you chose. Two consequences worth knowing: declining does not itself set a tracking cookie, and the stored record stays in your browser, while its consent signals are sent to Google to control analytics storage.

Because it lives in your browser, the choice is per browser and per device. Clearing your site data, or using a different browser, means we ask again only in the EEA, UK and Switzerland. If local storage is blocked, your decision still applies to the current page but cannot be remembered for later visits.

Changing your mind

You can withdraw consent at any time, and it must be as easy to withdraw as it was to give. A footer link that reopens the choice is not built yet. Use Turn off analytics cookies to withdraw or opt out in any region. Clearing this site’s data removes the stored choice: we ask again on your next visit in the EEA, UK and Switzerland, while elsewhere analytics cookie storage returns to granted. You can also email privacy@codaslabs.com and we will action your request. That link ships before the advertising tags do, and this paragraph gets replaced when it does.

Withdrawing later does not undo the past

Turning analytics cookie storage off prevents further analytics cookie storage, although cookieless pings can still be sent. It does not erase what was already collected while consent was in place. To have that deleted as well, ask us under the privacy policy.

Where you are changes what we do

United Kingdom, European Economic Area and Switzerland: analytics cookie storage is denied until you accept, unless you have already stored an acceptance. Google Analytics still loads and can send cookieless pings while you decide or after you decline; no advertising tags are loaded.

Everywhere else, including the United States, Google Analytics counts visits with analytics cookie storage granted by default and no banner; a stored refusal or, without a stored choice, Global Privacy Control overrides that default. Advertising remains off. You can opt out using the control under “Changing your mind” or the routes described below.

Global Privacy Control

We honor Global Privacy Control as an automatic analytics cookie opt-out when you have no stored consent choice. Global Privacy Control is a setting your browser or a browser extension can send automatically, so you do not have to make the same choice on every site you visit. Several US state laws require us to honor it, and we would honor it regardless.

A refusal saved using the analytics opt-out control takes precedence over the regional default on later visits.

When your browser sends Global Privacy Control and you have no stored choice, we deny analytics cookie storage before Google Analytics is configured and do not show the consent banner. A stored choice takes precedence over this signal. Google Analytics still loads and can send cookieless pings; no advertising tags are loaded.

US state opt-out rights

If you live in a US state with a consumer privacy law, that law gives you the right to opt out of targeted advertising, of the sale of personal information, and of sharing for cross-context behavioral advertising. Those states currently include California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. If your state has such a law and is not on that list, we will honor it anyway.

We do not sell personal information and never have. However, when an advertising tag lets Google, Meta or LinkedIn receive an identifier for your browser so we can show you our own ads elsewhere, several of those state laws count that as sharing for cross-context behavioral advertising and as targeted advertising. We disclose it plainly rather than argue about the definition.

You can exercise the opt-out in any of these ways:

• Use the analytics opt-out control above, or decline on the consent dialog if it is shown in your region.
• Block analytics requests using your browser’s tracking prevention if you also want to prevent cookieless pings.
• Email privacy@codaslabs.com, which works whether or not a dialog is showing.

We will not treat you differently, charge you more, or give you a worse version of the site because you opted out. You may use an authorized agent to opt out for you. If we refuse a request, you can appeal it, and the privacy policy explains how.

This section is about our marketing website only. It never applies to anything inside the product. Support conversations, bug captures and customer content are never used for advertising, never sent to an advertising provider, and never used to target anyone.

Advertising, and who gets what

Once switched on, we will run advertising tags from Google, Meta (Facebook and Instagram) and LinkedIn so we can tell which advertisements bring people here, and so we can show advertisements to people who have already visited. This is commonly called retargeting. In practice those companies set a cookie and receive a record that a browser loaded a page on this site.

These are used to advertise Tore, our own product. We do not let those providers use what they learn here to advertise anyone else’s products to you, and we do not sell your information to them.

You can also opt out directly with each provider, which works across every site rather than just this one: Google through its ads settings, Meta through its ad preferences, and LinkedIn through its advertising preferences. Your browser’s own tracking-prevention feature will block most of them too, and blocking third-party cookies entirely will block all of them.

What we set, and for how long

The analytics cookies are live when analytics storage is granted, either by your choice or the default outside the EEA, UK and Switzerland. The region cookie geo_consent_region remembers whether to show the banner for up to one day. Advertising cookies are not being set today; their specific names will be listed before advertising goes live.

Refusing or removing cookies

Every browser lets you block or delete cookies and clear local storage in its settings, usually under privacy or site data, and most offer tracking prevention that blocks third-party advertising cookies by default. Deleting this site’s data also deletes your consent choice, so we will ask again next time only in the EEA, UK and Switzerland; elsewhere the default permits analytics cookie storage.

Blocking the strictly necessary category will stop you from signing in. That is not us being awkward: those cookies are how the site knows the request is yours.

Help centers and portals we host for customers

When one of our customers runs their help center or feedback portal on Tore, those pages use only the strictly necessary and preference categories: enough to keep a session and remember a small choice. We do not run our own analytics or advertising tags on a customer’s portal, and we do not use visitors to a customer’s help center to advertise anything, to them or to anyone else. If a customer adds their own analytics to their portal, that is their decision, disclosed under their own privacy policy, and this policy does not cover it.

Changes to this policy

We will update this page when what we set changes, and always before a new category or a new provider starts, not after. The date at the top changes with it. If a change means we need consent we do not already have, we will ask again rather than carry your old answer forward onto something you did not agree to.

More

For everything else we do with information, see the privacy policy, and for the companies involved in running Tore, the subprocessor list. Questions to privacy@codaslabs.com.