Cookie Policy
What we actually set, and why — no vague "we use cookies to improve your experience".
Last updated: August 9, 2026
The short version: every cookie that keeps the Service working is essential and can't be turned off without breaking sign-in. Analytics only runs on the public marketing pages, never inside your authenticated workspace, and one of the two analytics tools we use doesn't set a cookie at all.
1. Essential cookies
These keep you signed in and protect the Service from cross-site attacks. You can't disable them individually — blocking them in your browser will sign you out or break forms.
| Cookie | Purpose | Duration |
|---|---|---|
| task.tenant | Keeps you signed in to your workspace. | 30 days |
| task.superadmin | Keeps IterDone staff signed in to internal administration. Not set for ordinary workspace members. | 8 hours |
| task.external | Temporarily holds your Google identity between the Google sign-in redirect and account creation. | 10 minutes |
| task.embed | Keeps an IterDone module signed in when it's embedded inside a partner site. Only set if you use an embedded view. | 12 hours, refreshed while active |
| Anti-forgery cookie | A standard ASP.NET Core cross-site-request-forgery token that protects forms and actions from being triggered by another site. | Session |
| Google sign-in correlation cookie | Verifies a "Continue with Google" redirect is genuine. Only set while a Google sign-in is in progress. | Cleared once sign-in completes |
2. Analytics on the public pages
These run only on public marketing pages like this one — never inside your signed-in workspace.
| Tool | Sets a cookie? | Notes |
|---|---|---|
| Google Tag Manager / Google Analytics | Yes, first-party analytics cookies | Only loads when a container ID is configured for the environment — today that's the live iterdone.com site only, not this test site. |
| Cloudflare Web Analytics | No — cookieless by design | A small script Cloudflare serves on the iterdone.com domain that reports aggregate page views back to the same origin. It doesn't use cookies or any other persistent identifier. |
3. Your choices
You can block or delete cookies in your browser settings. Blocking the essential cookies above will sign you out and may break forms; blocking the analytics tools has no effect on using the Service. We don't use any advertising or cross-site tracking cookies.
4. Changes to this policy
If the cookies we set change, we'll update this page and the "last updated" date above.
5. Contact
Questions about cookies? Email privacy@iterdone.com or see our Privacy Policy.