Cookies
Last updated 27 October 2026
toa.ee uses only strictly necessary cookies and browser storage: to keep you signed in, secure sign-in, and keep try-it links. No tracking cookies.
toa.ee only uses cookies and browser storage that the site needs to work. We don't use them for analytics, advertising or tracking, so there's nothing to accept or reject.
Short links and digital business cards
Opening a toa.ee short link or digital business card sets no cookies and stores nothing in your browser. The same goes for our free tools and the blog.
What we use
| Name | Type | What it does | When it's set | How long |
|---|---|---|---|---|
__Secure-authjs.session-token | Cookie | Keeps you signed in. | When you log in or sign up | 30 days, renewed while you use toa.ee |
__Host-authjs.csrf-token | Cookie | Protects sign-in and sign-out from forged requests. | When you open log in or sign up, or log out | Until you close your browser |
__Secure-authjs.callback-url | Cookie | Remembers which page to open after you log in. | When you log in | Until you close your browser |
__Secure-authjs.pkce.code_verifier | Cookie | Secures the hand-off to Google when you choose Continue with Google. | When you choose Continue with Google | 15 minutes |
__Secure-authjs.state | Cookie | Secures the hand-off to Google when you choose Continue with Google. | When you choose Continue with Google | 15 minutes |
toa.ee.anon-claim-tokens | Local storage | Remembers try-it links you made without an account, so we can add them to your account if you sign up in this browser. | When you shorten a link on the home page without an account | Until you sign up, or 24 hours after the link was made |
Other sites
When you pay or manage billing, you're on Stripe's site. When you choose Continue with Google, you're on Google's site. Their cookie notices apply there:
- Stripe (checkout.stripe.com, billing.stripe.com) — Stripe cookie policy
- Google (accounts.google.com) — Google cookie policy
Your choices
You can block or delete cookies in your browser settings. If you block them, you can't log in. Short links, digital business cards and the free tools work without them.
If this changes
This list is generated from the same registry the site's code is checked against, so it changes when the site changes. If we ever want to use cookies that aren't strictly necessary, we'll ask first, and you'll be able to say no.
How we handle personal data: Privacy