1. Summary
ToolsXpo sets no advertising cookies, no analytics cookies and no third-party trackers. Everything below is strictly necessary to make the site work, which is why you are not asked for consent — under UK and EU rules, strictly necessary cookies do not require it.
2. What we set
| Cookie | Purpose | Lifetime |
|---|---|---|
txp_session | Keeps you signed in to your dashboard. HttpOnly, Secure, SameSite=Lax. | 30 days |
txp_admin | Staff-only admin session. Set only for our own administrators. HttpOnly, Secure, SameSite=Strict. | 8 hours |
| Theme preference | Remembers light or dark mode. Stored in your browser's local storage, not sent to us. | Until cleared |
HttpOnly means JavaScript cannot read the cookie, so a script injected into a page cannot steal your session.
3. The API sets no cookies
Calls to https://api.toolsxpo.com authenticate with an API key in the Authorization header and set no cookies at all. Nothing about your API usage depends on browser state.
4. Third parties
When you open a checkout, Paddleloads its payment form and may set cookies necessary to process your payment and prevent fraud. That is governed by Paddle's own cookie and privacy notices. Paddle only loads when you start a purchase — not on ordinary browsing.
5. Controlling cookies
You can block or delete cookies in your browser settings. Blocking the session cookie will sign you out and prevent you from signing back in, since there is no other way for us to know a request is yours. The public tools and the API are unaffected.
6. More
How the data behind these cookies is handled is covered in the Privacy Policy. Questions: privacy@toolsxpo.com.