Cookie Policy

Last revised: August 16, 2025

Applies to: Alloy by Ragility Inc. at alloy.site and related tools, APIs, and services.

This Cookie Policy explains how we use cookies and similar technologies on Alloy. For more information about how we process personal data, see our Privacy Policy.

1. What are cookies?

Cookies are small text files placed on your device to store data that can be read by a web server. Related technologies include local storage, session storage, and pixels.

2. How we use cookies (summary)

  • Strictly necessary (essential for the site and security): session/authentication, CSRF/state, rate‑limiting and traffic protection.
  • Functional (remember settings): UI preferences (e.g., tool options).
  • Analytics/measurement (optional; consent‑based where required): understand feature usage and performance.
  • Advertising/attribution (optional; used only if you enable Google Ads or similar): measure campaign effectiveness.

We do not use third‑party social tracking pixels by default. We do not sell personal information.

3. Cookies we use

Names and lifetimes may vary by browser and updates. Examples below reflect our current implementation.

A. Strictly necessary (no consent required)

  • alloy_sess (HTTP‑only)
    • Provider: Ragility (Alloy)
    • Purpose: Keep you signed in; secure session management
    • Duration: Session / up to session TTL
  • oauth_state (HTTP‑only)
    • Provider: Ragility (Alloy)
    • Purpose: OAuth state/CSRF protection during Google sign‑in
    • Duration: ~10 minutes
  • Cloudflare protection (e.g., __cf_bm, _cfuvid)
    • Provider: Cloudflare
    • Purpose: Bot management, rate limiting, security
    • Duration: Short‑lived (minutes to hours)

B. Functional (may be stored in local/session storage)

  • alloy_prefs (local storage)
    • Provider: Ragility (Alloy)
    • Purpose: Remember tool UI settings (e.g., last format choice)
    • Duration: Until you clear browser storage

C. Analytics/measurement (optional; consent‑based)

  • Amplitude EU (e.g., amp_*, amplitude_id_*)
    • Provider: Amplitude (EU data residency)
    • Purpose: Product analytics (events, performance)
    • Duration: Up to 12–24 months (varies by Amplitude config)
  • Google Analytics / gtag (e.g., _ga, _gid, _ga_*)
    • Provider: Google
    • Purpose: Usage measurement and site performance
    • Duration: _ga up to 24 months; _gid up to 24 hours

D. Advertising/attribution (optional; only if enabled)

  • Google Ads (e.g., _gcl_au)
    • Provider: Google
    • Purpose: Campaign attribution and ad measurement
    • Duration: ~90 days

We gate Analytics and Advertising cookies behind consent where required (e.g., EEA/UK). You can withdraw consent at any time via our Cookie Settings.

4. Managing cookies & consent

  • Consent controls: In supported regions, our banner lets you accept or reject Analytics and Advertising cookies. Essential cookies are always active.
  • Withdraw consent: Use the Cookie Settings link in the footer or clear your browser cookies and refresh the page.
  • Browser controls: You can block or delete cookies in your browser settings. Some features may not function without essential cookies.

5. International transfers

Some providers (e.g., Google, Amplitude) may process data outside your country. We use appropriate safeguards (e.g., Standard Contractual Clauses) where required. See our Privacy Policy for details.

6. Updates to this policy

We may update this policy to reflect changes to our practices or applicable law. We will post the updated policy with a new effective date.

7. Contact

Ragility Inc.
Email: [email protected]
Postal: 2261 Market Street STE 85742, San Francisco, CA 94114, USA
Website: https://alloy.site

8. Your choices (quick links)

Questions about these terms? Contact us at [email protected]