Effective Date: July 24, 2026

Transparent Cookie Practices. Built Around Privacy.

Toffee uses only the cookies and similar technologies necessary to provide a secure, reliable, and personalized experience. You remain in control of your preferences at all times.

Privacy by Design User-Controlled GDPR & CCPA Ready Minimal Tracking
Privacy Center

1. Introduction & 2. What Are Cookies?

This Cookie Policy explains how Toffee uses cookies and similar technologies across our website, SaaS dashboard, and authentication systems. Please note that the Toffee Browser Extension primarily stores operational data locally via IndexedDB and uses cookies strictly for web-based services and authentication.

Cookies are small data files stored on your device. We use HTTP Cookies, Session Cookies, Persistent Cookies, Local Storage, IndexedDB, and secure Authentication Tokens to improve functionality, security, and your overall user experience.

3. Why We Use Cookies

We use cookies strictly for the following purposes:

Secure user authentication
Account & theme preferences
Language selection
Security & fraud protection
Performance optimization
Anonymous analytics
Subscription management
User experience improvements

Privacy Guarantee: Cookies are NEVER used to read, track, or access your raw AI conversations.

4. Types of Cookies We Use

Essential Cookies

Required for core functionality such as user authentication, session management, CSRF protection, and payment processing. These cannot be disabled without breaking the platform.

Functional Cookies

Improve usability by remembering your language, theme, dashboard preferences, and time zone settings.

Analytics Cookies

Help us improve the product via anonymous traffic statistics, performance monitoring, and error tracking. You can opt out of these at any time.

Marketing Cookies

Toffee currently does not use marketing cookies. If introduced for campaign attribution or referral tracking in the future, explicit opt-in consent will be required.

5. Third-Party Cookies & 6. Browser Extension Storage

Certain third-party providers may set cookies to provide their services securely. This includes Google OAuth, GitHub OAuth, Stripe (for payments), Cloudflare (for security), and AWS.

Regarding the Browser Extension: The Toffee extension relies primarily on IndexedDB and local browser cache rather than traditional cookies. Extension storage is isolated and strictly separate from general website tracking.

7. Cookie Lifetimes & 8. Browser Controls

Session Cookies are deleted when you close your browser. Persistent Cookies remain until they expire or you manually delete them.

You can manage, view, block, or delete cookies at any time through your browser settings (Chrome, Firefox, Safari, Edge). Please note that disabling essential cookies will prevent you from logging into your Toffee account.

Consent, Security & International Compliance

We utilize a comprehensive consent management system allowing you to "Accept All", "Reject Optional", or customize your preferences anytime.

We adhere strictly to the GDPR, CCPA, and the ePrivacy Directive. Sensitive authentication cookies are encrypted, and our security measures prevent unauthorized access.

12. Updates & 13. Contact

We may update this policy as our platform evolves. Material changes will be communicated via the dashboard or email.

For questions regarding your cookie preferences, privacy requests, or technical support, contact our Data Protection Officer at: privacy@toffee.ai.

Privacy Starts with Transparency

Toffee is committed to using cookies responsibly, limiting data collection to what is necessary for security and functionality, and giving every user meaningful control over their privacy preferences.

View Privacy Policy

Designed & Developed by Abhay Sachin Donde