Cookie Policy

Last updated: November 2026.

What cookies are

Cookies are small files a website stores in your browser to remember information from one page to the next — for example, that you are signed in to your account or what you chose in the cookie notice. They can be first-party (set by BassoHub) or third-party (set by other services, such as Google).

How you choose

On your first visit we show a notice with two options:

• Accept all: also allows Google's advertising cookies, including for personalized ads.
• Essential only: keeps only what the site needs to work. If Google ads are shown, they won't be personalized — even so, Google may use cookies to cap how often ads appear, measure results in aggregate and fight fraud.

You can change your mind anytime through the "Cookie preferences" link in the footer. You can also delete or block cookies in your browser settings, but blocking essential cookies may prevent you from signing in.

Essential cookies

Always on, because the site doesn't work properly without them.

• payload-member-token — keeps you signed in to your reader account. Type: essential, first-party, not readable by scripts (httpOnly). Duration: up to 30 days.
• payload-token — only for the site staff, in the admin area. Type: essential, first-party, httpOnly.
• hub_member — just a hint that an account is signed in on this browser (grants no access), so the "My tools" menu doesn't call the server needlessly. Type: essential, first-party. Duration: up to 30 days.
• cookie_consent — stores your choice in the cookie notice (all or essential). Type: essential, first-party. Duration: 12 months.
• oauth_state and oauth_verifier — protect the "Sign in with Google" flow against fraud. Type: essential, first-party. Duration: 10 minutes.

Local storage (not a cookie). hub:recent-tools keeps in your browser the list of the last tools you opened, for the "Recently used" shortcut. It is never sent to the site and you can delete it anytime with the "Clear history" button.

Advertising cookies (Google AdSense)

These only exist when Google ads are enabled on the site. They are third-party cookies set by Google.

• __gads, __gpi and __eoi — ad delivery, frequency capping, measurement and fraud prevention. Type: advertising, third-party. Duration: set by Google, usually 6 to 13 months.
• IDE (on the doubleclick.net domain) — personalized ads and measurement, only if you choose "Accept all". Type: advertising, third-party. Duration: set by Google, usually 13 months to 2 years.

Google may change the names and duration of these cookies. The up-to-date list is at How Google uses cookies, and you can turn off personalization in Google Ads Settings.

What we don't use

We currently don't use analytics (audience measurement) cookies or social media pixels. If that changes, we will update this page and ask for your consent where required.

More information

To learn how we handle personal data in general, see our Privacy Policy in the footer. Questions: contact us through the channels listed in the footer.