Cookie Policy
Every category of cookie and browser-storage technology TaskGlaze actually uses, what it does, and how to control it — no advertising trackers run on the Service, and the one analytics tool we use (PostHog) only loads if you accept it below.
Contents · 8 sections
03What we use, by category
This is exhaustive for our own domain — every category of cookie or browser-storage technology we currently use, no more, no less. It matches the equivalent table embedded in our Privacy Policy. We describe this by category (who sets it, why, and how long it lasts) rather than by literal cookie name — that's the detail that's actually meaningful to you as a visitor, and it's what cookie transparency rules require us to disclose.
| Category | Set by | Purpose | Duration |
|---|---|---|---|
| Authentication | TaskGlaze | Keeps you signed in and protects the sign-in process itself against cross-site request forgery. | For your session, or up to 7 days |
| Preferences | TaskGlaze | Remembers a choice you made — your cookie-notice response, your light/dark display preference, and whether you've already seen the post-signup welcome screen (the latter two stored in your browser's local storage, not a cookie) — so we don't ask or reset it every visit. | Up to 1 year, or until you clear it |
| Security & fraud prevention | Cloudflare | Confirms you're not a bot on sensitive forms (sign-up, login, password reset, two-factor verification, and the contact form). | Short-lived — set only on those specific forms |
| Features & services | Stripe | Payment processing during checkout — set only on Stripe's own hosted checkout page, after you're redirected there, never on our domain. | Governed by Stripe, not us |
| Analytics | PostHog | Measures which pages and features get used, tied to your account, so we know what to improve. EU-hosted. Only loads if you accept Analytics in the cookie banner below — never set for a visitor who hasn't, or who chooses "Reject optional." | Up to 1 year, or until you withdraw analytics consent |
04What each category means
- Authentication — keeps you signed in and protects the sign-in process itself. Required for the Service to function; you cannot disable these and stay logged in.
- Security & fraud prevention — distinguishes a real visitor from a bot on sensitive forms (sign-up, login, password reset, two-factor verification, and the contact form).
- Preferences — remembers a choice you made (light/dark theme, whether you've responded to our cookie notice, whether you've seen the post-signup welcome screen) so we don't ask or reset it every visit. The theme and welcome-screen flags live in your browser's local storage, not a cookie.
- Features & services — third-party cookies required for a specific feature to work: Stripe's own cookies during checkout.
- Analytics — optional, and OFF by default: measures which pages and features get used so we know what to improve. Only loads after you accept it in the cookie banner.
05Analytics & advertising
We run no third-party advertising trackers on the Service — no ad-network pixels, nothing that builds a cross-site profile of you for marketing purposes. As of September 2026 we use one analytics tool, PostHog (EU-hosted), to measure which pages and features get used so we know what to improve. It is entirely optional: it only loads after you affirmatively accept the "Analytics" category in our cookie-consent banner, it is off by default, and you can withdraw that consent at any time — see "How your cookie choice is remembered" below. If our advertising posture ever changes, this page and the banner will be updated first.
06How your cookie choice is remembered
The first time you visit without an existing choice, we show a cookie/terms notice with two options: "Accept all" and "Necessary only". Your choice is saved in a small first-party cookie on the shared taskglaze.com domain, so it applies across the marketing site and the app and you won't be asked again on that browser. Signed-in accounts skip this notice entirely — see the Privacy Policy's "Your privacy rights" section for how account-level consent is recorded instead, which is what actually makes "asked once, not every device" true for a real account rather than just one browser.
07How to take control of your cookies
You can remove or block cookies using your browser's own settings. If you block strictly-necessary cookies (Authentication or Security & fraud prevention above), you will not be able to sign in or complete sign-up/password-reset forms — that's a direct consequence of what those cookies do, not a separate restriction we impose.
08Updates & contact
We may update this Cookie Policy as our use of cookies changes. Material changes will be reflected here with an updated "Last updated" date. Questions? Contact TASKGLAZE LTD (operating TaskGlaze), at support@taskglaze.com.