Cookie & Storage Policy
This policy explains the cookies and similar browser storage used on grabcast.click. It is part of our Privacy Policy.
In short: GrabCast itself sets no advertising or analytics cookies. We keep things like your sign-in, theme, language, favorites, tool settings and drafts in your browser's own storage so the site works the way you left it. The only cookie we set is a short-lived security cookie during social-account connection. Google may set advertising cookies on content pages if ads are shown, and only with consent where the law requires it.
On this page
1. Cookies and browser storage
Cookies are small text files a website stores in your browser. localStorage and sessionStorage are similar browser features that let a site keep data on your device; sessionStorage is cleared when you close the tab. Unlike cookies, localStorage and sessionStorage are not sent to our servers with every request — GrabCast reads them in your browser.
2. What GrabCast stores in your browser
All of these are strictly necessary for a feature you use or remember a choice you made. None is used for advertising or to track you on other sites.
| Name (key) | Type | Purpose | Kept |
|---|---|---|---|
gc_token, gc_email, gc_avatar | localStorage | Keeps you signed in and shows your account in the header | Until you sign out |
gc_did | localStorage | Random device identifier for GrabCast: usage statistics, fair-use limits and abuse prevention (see Privacy Policy) | Until you clear site data |
gc_theme, gc_lang | localStorage | Your light/dark theme and language | Until you change or clear them |
gc_favs, gc_recent, gc_set_* | localStorage | Favorite and recent tools and each tool's options (format, quality…) | Until you clear them |
gc_work_*, gc_prefill_* and tool drafts (for example the invoice, resume, word counter or Pomodoro tools) | localStorage / IndexedDB | The file or text you are working on, so a reload or the Back button doesn't lose it (files for up to 3 days) | Up to 3 days for files; drafts until you clear them |
| Scheduler drafts (signed out) | localStorage | Posts you drafted without an account | Until you delete them |
gc_tmpmail_* | localStorage | Your current temporary inbox address and its access key | Until you clear them; the inbox itself expires on our server |
gc_ai_key, gc_ai_provider, gc_stt_key, gc_ai_bk | localStorage | AI provider keys you chose to keep in this browser (they go straight to the provider) | Until you remove them |
gc_drive_conn, gc_drive_email | localStorage | Remembers that you connected Google Drive in a tool | Until you disconnect |
gc_ads_npa | localStorage | Your "opt out of personalized ads" choice (Your privacy choices) | Until you change it |
gc_api, gc_api_h, gc_api_fo, gc_trk, gc_site, gc_annc_hide, gc_er | sessionStorage | Which of our API servers is healthy, avoiding duplicate page-view counts, dismissed announcements, a small counter that limits how many anonymous error reports one tab sends | Until you close the tab |
| Service worker cache | Cache storage | Lets the site load faster and work offline | Until replaced by a newer version |
Some tools also download open-source code or AI models into your browser's cache so they can run on your device (see third-party resources).
3. The one cookie we set
| Name | Set by | Purpose | Kept |
|---|---|---|---|
gc_ob_<platform> | Our API server (HttpOnly, Secure, only sent to /api/) | Security: ties the social-account connection you started to your browser, so nobody else can finish it (prevents login CSRF) | 15 minutes |
4. Third-party cookies
- Google advertising (only if ads are shown): on some content pages Google AdSense may set or read cookies (for example
__gads,__gpi,IDE) to show and measure ads and, with consent where required, to personalize them. Ads are never loaded on account, sign-in, admin, Scheduler app or legal pages. See how Google uses cookies in advertising. - Sign-in and pickers you choose to use: "Continue with Google", the Google Drive picker, Dropbox Chooser and the Microsoft OneDrive picker run in Google's, Dropbox's or Microsoft's own windows and may use their own cookies, under their privacy policies.
- Cloudflare: Cloudflare, which delivers our site, and Cloudflare Turnstile on sign-up and password-reset forms may set strictly necessary security cookies (for example
__cf_bmorcf_clearance) to protect the site from bots. - Affiliate partners: when you follow an affiliate link, the partner's own site may set a cookie to record that you came from GrabCast. That happens on their site, under their policy.
We don't use Google Analytics, the Meta pixel or other third-party tracking scripts.
5. Consent
Strictly necessary storage doesn't need consent. For visitors in the EEA, the UK and Switzerland, Google's certified consent message asks for your consent before any personalized-advertising cookies are used, and you can change your choice at any time from the consent link it shows. We also honor the Global Privacy Control signal and the opt-out switch: with either on, we request only non-personalized ads.
6. How to control or delete them
- Everything GrabCast stored: clear this site's data in your browser (Chrome: Settings → Privacy and security → Third-party cookies / Site data; Safari: Settings → Privacy → Manage Website Data; Firefox: Settings → Privacy & Security → Cookies and Site Data). You'll be signed out and your local drafts and settings will be removed.
- Just your sign-in: sign out from the account menu.
- Advertising cookies: use Google Ads Settings, aboutads.info/choices or youronlinechoices.eu, or block third-party cookies in your browser.
7. Changes
We update this page when we add or remove storage. Questions: privacy@grabcast.click.