Cookie Policy
Last updated: June 2026
This Cookie Policy explains what cookies and similar technologies Scrab Tools uses, why we use them, how long they last, and how you can control them. It should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files stored on your device by your browser. Similar technologies include localStorage and sessionStorage. They let a site remember actions and preferences (such as keeping you signed in) and help keep the service secure.
2. Categories of cookies we use
Strictly necessary (always on): required for core functionality and security. These include our authentication cookie 'cf_refresh' (a secure, HttpOnly refresh-token cookie that keeps you signed in), an anonymous guest identifier 'cf_guest' (used for rate-limiting and anonymous history on server tools), a short-lived OAuth state cookie used during Google sign-in, and your saved cookie-consent choice. These cannot be switched off as the service would not work without them.
Analytics (optional): help us understand, in aggregate, how the site is used so we can improve it. These are set only if you consent.
Marketing (optional): may be used for personalized content. These are off by default and set only if you consent.
3. Third-party cookies
We use Google reCAPTCHA across the whole site — it loads on every page so it can score a browsing session for signs of automation, and it is checked whenever you submit a form or send a file to our servers. This is a strictly necessary security measure and runs without collecting your consent choices; Google may set cookies and collect device and behaviour data subject to its own Privacy Policy and Terms of Service. Our hosting and CDN providers may also set strictly necessary cookies for security and load balancing.
4. How long cookies last
Session cookies are deleted when you close your browser. Persistent cookies last for a defined period — for example, the guest identifier and refresh-token cookie persist for up to 30 days (or until you sign out), and your consent choice is stored so we do not ask again on every visit.
5. Managing your choices
You can accept or reject optional cookies via our consent banner, and change your mind at any time. We record your choice (with timestamp, IP, country, and browser) to honor it and to comply with consent regulations.
You can also block or delete cookies in your browser settings, but blocking strictly necessary cookies may break sign-in and other core features.