A Privacy Policy Short Enough to Read
Last updated September 15, 2026. The summary: the URL you check is fetched once to read its cookies and HTML, the browser tab runs entirely on your machine, and a cookie checker that set tracking cookies of its own would be a joke, so it doesn't.
What Happens When You Check a URL
When you submit a URL to the checker, this site's server fetches that page once, following redirects, to read the Set-Cookie headers and the HTML. The response is parsed in memory to build the report and is not stored as a personal history, a searchable archive or a dataset of checked sites. The fetch carries a user agent that names this tool, so the site you check can see that a request came from cookiecheck.tools; it cannot see who asked for it.
The browser tab never leaves your browser
The console snippet you copy reads document.cookie, localStorage and sessionStorage on the page where you run it and prints them. When you paste that output back here, the classification is plain client-side JavaScript in your tab. The pasted text, which may include session tokens and other values you would not want anywhere else, is never transmitted to this server or to anyone. Close the tab and it is gone.
Cookies and storage on this site
This site sets no cookies for the product. It keeps nothing in localStorage or sessionStorage. There is no login and no preference to remember.
Page views are measured with Google Analytics, which sets its own first-party cookies (_ga and _ga_*) and sends the page address, a random client identifier and technical details about your browser to Google. The data is used only to see which pages get read. Google's handling of it is described in the Google privacy policy. Browsers with a Global Privacy Control signal, an ad blocker or scripts disabled are not measured.
Third parties this site touches
Fonts load from Google Fonts, which means your browser requests font files from Google's servers as described in the Google privacy policy. No ad networks or tracking pixels load here. The server does what any web server does: it delivers the page files and may write standard, short-lived access logs handled by the hosting provider. Rate limiting keeps a hashed, temporary count of requests per visitor address so the fetcher cannot be abused; those counters expire within the hour.
How to clear local data
There is nothing to clear. If you emailed a URL to the contact address for debugging, say the word and that email gets deleted too.
If this policy ever changes, the date above changes with it, and the substance will stay consistent with the terms of use.