Cookie Policy
What we actually set, and why — no vague "we use cookies to improve your experience".
Last updated: August 9, 2026
The short version: every cookie that keeps the Service working is essential and can't be turned off without breaking sign-in. Analytics only runs on the public marketing pages, never inside your authenticated workspace, and one of the two analytics tools we use doesn't set a cookie at all.
1. Essential cookies
These keep you signed in and protect the Service from cross-site attacks. You can't disable them individually — blocking them in your browser will sign you out or break forms.
| Cookie | Purpose | Duration |
|---|---|---|
| task.tenant | Keeps you signed in to your workspace. | 30 days |
| task.superadmin | Keeps IterDone staff signed in to internal administration. Not set for ordinary workspace members. | 8 hours |
| task.external | Temporarily holds your Google identity between the Google sign-in redirect and account creation. | 10 minutes |
| task.embed | Keeps an IterDone module signed in when it's embedded inside a partner site. Only set if you use an embedded view. | 12 hours, refreshed while active |
| Anti-forgery cookie | A standard ASP.NET Core cross-site-request-forgery token that protects forms and actions from being triggered by another site. | Session |
| Google sign-in correlation cookie | Verifies a "Continue with Google" redirect is genuine. Only set while a Google sign-in is in progress. | Cleared once sign-in completes |
2. Analytics on the public pages
These run only on public marketing pages like this one — never inside your signed-in workspace.
| Tool | Sets a cookie? | Notes |
|---|---|---|
| Google Tag Manager / Google Analytics | Yes, first-party analytics cookies | Only loads when a container ID is configured for the environment — today that's the live iterdone.com site only, not this test site. |
| Cloudflare Web Analytics | No — cookieless by design | A small script Cloudflare serves on the iterdone.com domain that reports aggregate page views back to the same origin. It doesn't use cookies or any other persistent identifier. |
3. Your choices
You can block or delete cookies in your browser settings. Blocking the essential cookies above will sign you out and may break forms; blocking the analytics tools has no effect on using the Service. We don't use any advertising or cross-site tracking cookies.
4. Changes to this policy
If the cookies we set change, we'll update this page and the "last updated" date above.
5. Contact
Questions about cookies? Email [email protected] or see our Privacy Policy.