tosgenerator — Cookie Policy
Version 2 · in force since 3 Oct 2026
Effective date and last updated: 4 October 2026 · Version 2026-10-04
This policy explains the cookies and similar technologies (such as browser local storage) that Sprout LLC uses on tosgenerator.com and in the tosgenerator app. Sprout LLC's details are in the Terms of Service (/legal/terms), section 26.
1. Short version
- We use only cookies and storage that are strictly necessary to run the site, keep you signed in and protect it, or that remember a choice that you make (for example dark mode).
- We do not use analytics, advertising or social-media cookies, and we do not let third parties track you across sites through tosgenerator.com.
- Because of this, we do not show a cookie banner on our own site. The law does not require consent for these cookies. If we ever add cookies that need consent, we will ask you first and update this policy.
2. What cookies are
A cookie is a small text file that a website stores in your browser. Local storage is a similar browser feature. Websites use them to remember information between pages and visits.
3. The cookies and storage that we use
- Name
- _tosgenerator_key
- Type
- Cookie, first party
- Set by
- tosgenerator.com
- Purpose
- Keeps your session (sign-in and security state). Signed and encrypted. Strictly necessary.
- Duration
- Until you close the browser
- Name
- _tosgenerator_web_user_remember_me
- Type
- Cookie, first party
- Set by
- tosgenerator.com
- Purpose
- Keeps you signed in on this device after you sign in. Signed. Strictly necessary for the sign-in that you asked for.
- Duration
- 14 days
- Name
- XSRF-TOKEN
- Type
- Cookie, first party
- Set by
- tosgenerator.com
- Purpose
- Protects forms against cross-site request forgery. Strictly necessary.
- Duration
- Until you close the browser
- Name
- sidebar_state
- Type
- Cookie, first party
- Set by
- tosgenerator.com
- Purpose
- Remembers whether you opened or closed the app sidebar. Set only when you use it.
- Duration
- 7 days
- Name
- appearance
- Type
- Local storage, first party
- Set by
- tosgenerator.com
- Purpose
- Remembers the light, dark or system theme that you chose. Set only when you choose.
- Duration
- Until you change it or clear your browser
- Name
- Cloudflare security cookies, for example __cf_bm or cf_clearance
- Type
- Cookie
- Set by
- Cloudflare (our network and security provider)
- Purpose
- Can be set when Cloudflare protects our site against bots and attacks. Strictly necessary.
- Duration
- Up to 30 minutes (__cf_bm); cf_clearance up to the challenge lifetime set by Cloudflare
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
| _tosgenerator_key | Cookie, first party | tosgenerator.com | Keeps your session (sign-in and security state). Signed and encrypted. Strictly necessary. | Until you close the browser |
| _tosgenerator_web_user_remember_me | Cookie, first party | tosgenerator.com | Keeps you signed in on this device after you sign in. Signed. Strictly necessary for the sign-in that you asked for. | 14 days |
| XSRF-TOKEN | Cookie, first party | tosgenerator.com | Protects forms against cross-site request forgery. Strictly necessary. | Until you close the browser |
| sidebar_state | Cookie, first party | tosgenerator.com | Remembers whether you opened or closed the app sidebar. Set only when you use it. | 7 days |
| appearance | Local storage, first party | tosgenerator.com | Remembers the light, dark or system theme that you chose. Set only when you choose. | Until you change it or clear your browser |
| Cloudflare security cookies, for example __cf_bm or cf_clearance | Cookie | Cloudflare (our network and security provider) | Can be set when Cloudflare protects our site against bots and attacks. Strictly necessary. | Up to 30 minutes (__cf_bm); cf_clearance up to the challenge lifetime set by Cloudflare |
Bot protection on public forms. When you use the public scan form or policy check form, Cloudflare Turnstile checks signals from your browser to confirm that you are not a bot. This is strictly necessary to protect the scanner against abuse. Cloudflare processes these signals under its own privacy policy (cloudflare.com/privacypolicy).
4. Our consent banner on our customers' websites
Hosted documents and the consent banner are not offered to new customers. Some existing customers use the tosgenerator consent banner on their own websites. On those websites, the banner stores a first-party cookie named tg_<site key> for 365 days. It remembers the visitor's cookie choices. That website, not Sprout LLC, decides which categories the banner offers and must describe this cookie in its own cookie policy. To change your choice on such a website, use that website's "Cookie settings" link.
5. How to control cookies
You can delete or block cookies in your browser settings. If you block the strictly necessary cookies, you cannot sign in and some parts of the site will not work. You can remove the appearance setting by choosing "System" in the theme menu or by clearing your browser's site data.
6. Changes
We update this policy when we change the cookies that we use. The date at the top shows the last update.
7. Contact
facundomartin@sproutco.io · hola@tosgenerator.com