Cookie Policy
Effective:
Services and scope
These policies cover the Grid Heap services that link here. Read the common provisions together with the product-specific provisions below for the service you use. A separately signed agreement controls a conflict within its scope.
Products and domains
- Grid Heapgridheap.com
- RShiftrshift.com, rshift.de, accounts.rshift.com, app.rshift.com
- TidyAnswertidyanswer.com
- TidyMessagestidymessages.com
- Speech Namespeech.name
- Planner.liplanner.li
- Enolaeno.la
- Dueglowdueglow.com
- AgentMQagent.mq
- Agentic.Payagentic.pay
- Inference.Payinference.pay
- Bots.Paybots.pay, accounts.bots.pay
- AI Evalsaievals.app
- AI Agent Payaiagent.pay
- 4dub4dub.com, accounts.4dub.com
- AIRuntimeairuntime.dev
- nnu.usnnu.us
- TrainShelltrain.sh
- heap.pageheap.page
- Outseekoutseek.xyz
- Tokens.Paytokens.pay
- Embeddingsembeddings.app
- Markov Nowmarkov.now
- Serializeserialize.dev
- Cowork Towncowork.town
This Cookie Policy explains how Grid Heap, Inc., a Delaware corporation (“Grid Heap”, “we”, “us” or “our”) uses cookies and similar technologies in connection with the gridheap.com website and any other website that we own or control and which posts or links to this Cookie Policy (collectively, the “Sites”).
Read this policy together with the product-specific information for the website you use. Cookies, providers and controls differ by domain and feature. A choice on gridheap.com does not automatically control a different product domain.
What are cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies serve different purposes, like helping us understand how a site is being used, letting you navigate between pages efficiently, remembering your preferences, and generally improving your browsing experience.
Our Sites may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them).
We use two broad categories of cookies: (1) first party cookies, served directly by us to your computer or mobile device, which we use to recognize your computer or mobile device when it revisits our Sites; and (2) third-party cookies, which are served by service providers or business partners on our Sites, and can be used by these parties to recognize your computer or mobile device when it visits other websites. Third-party cookies can be used for a variety of purposes, including site analytics, advertising, and social media features.
What types of cookies and similar tracking technologies do we use on the Sites?
The categories below describe technologies where they are used by the applicable Site. The product-specific information below identifies applicable uses and controls. A category’s inclusion here does not mean every Site uses it.
| Type | Description | Who serves the cookies | How to control them |
|---|---|---|---|
| Essential | These cookies are necessary to allow the technical operation of our services (e.g., they enable you to move around on a website and to use its features). | The applicable Site and its authentication/security providers identified in the product-specific provisions below. | Browser settings. Disabling necessary mechanisms can prevent sign-in or requested features from working. |
| Functionality / performance | Enhance the performance and functionality of our services. | The applicable Site or provider identified in the product-specific provisions below. | The Site’s available settings or browser storage controls. |
| Analytics | These cookies help us understand how our services are performing and being used. | Only providers identified for the applicable Site and feature in the product-specific provisions below. | The Site’s available consent controls, where required, and browser settings. |
We do not use advertising or social cookies as a common practice across the Sites. The product-specific provisions below identify any applicable optional tracking and its controls. Exact identifiers, providers, purposes, expiry and controls are specific to the deployed Site.
Service provider names alone do not establish that cookies are set. For example, a font request can disclose an IP address and browser information without setting a cookie.
Other technologies
In addition to cookies, our Sites may use other technologies to collect information automatically, as described for the applicable product.
Browser Web Storage
We may use browser web storage (including via HTML5), also known as locally stored objects (“LSOs”), for similar purposes as cookies. Browser web storage enables the storage of a larger amount of data than cookies. Your web browser may provide functionality to clear your browser web storage.
Clearing browser storage may remove locally stored application data. Product-specific information identifies any separate application storage.
Web Beacons
Where described for the applicable product, we may use web beacons (which are also known as pixel tags and clear GIFs) on our Sites and in our HTML formatted emails to track the actions of users on our Sites and interactions with our emails. Unlike cookies, which are stored on the hard drive of your computer or mobile device by a website, pixel tags are embedded invisibly on webpages or within HTML formatted emails. Their applicable purpose and controls are described in the product-specific provisions below.
Mobile application SDKs and other application technologies are covered by the applicable app’s notice; this website policy does not describe every app’s processing.
Your choices
Your options for controlling what information cookies and similar technologies collect about you include:
Site cookie controls. Use the cookie banner or settings described for the applicable Site, where available. Where consent is required, optional technologies must be controlled on the relevant domain. The available controls are described in the product-specific provisions below.
Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Sites may not work properly. If you do not accept our cookies, you may experience some inconvenience in your use of our Sites. For example, we may not be able to recognize your computer or mobile device and you may need to log in every time you visit our Sites.
Blocking images/clear gifs: Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your particular browser or device settings.
Third-party controls. Use the applicable provider’s controls where identified in the product-specific provisions below. We honor valid opt-out preference signals where required by applicable law.
Apply relevant choices separately on each device, browser and Site. For more information about how we collect, use and share your information, see our Privacy Policy.
Changes
Information about the cookies we use may be updated from time to time, so please check back on a regular basis for any changes.
Questions
If you have any questions about this Cookie Policy, please contact us by email at legal@gridheap.com.
Grid Heap, Inc., 1111B S Governors Ave Ste 51059, Dover, DE 19904, United States.
Product-specific additions
The following provisions apply to the named products together with this policy. They control a conflict with a common provision for that product.
RShift
rshift.com · rshift.de · accounts.rshift.com · app.rshift.com
RShift uses necessary sign-in and edge-security mechanisms, and browser storage for your chosen locale and in-progress work. The marketing website’s aggregate analytics and the signed-in application’s analytics have separate configurations. Where PostHog is enabled in the application, it stores analytics state in localStorage and can associate permitted feature events with an account or organization. PostHog session recording is off by default, with an optional mode and feature-flag gate. This is analytics storage even when no analytics cookie is set; the common optional-storage controls apply where consent is required.
| Mechanism | Purpose | Duration |
|---|---|---|
Clerk __clerk_db_jwt / __session |
Authentication and session continuity | Session or short-lived authentication period |
rshift-locale in localStorage |
Remember the selected interface locale | Until cleared |
ai-draft:* in sessionStorage |
Preserve an in-progress draft in the current tab | Until the session ends, the draft is discarded or the document is saved |
| PostHog localStorage state, where enabled | Analytics identifiers and feature-state persistence | Until cleared or changed by the configured SDK |
| Edge/security mechanisms | Routing, abuse prevention and secure delivery | Short-lived |
OAuth and Stripe pages can use their own necessary mechanisms under the respective provider’s controls. Clear cookies or local/session storage using browser settings; removing authentication storage can prevent sign-in. Clearing browser drafts can remove unsaved work.
Planner.li
planner.li
Planner.li uses necessary authentication and application storage plus Adobe Fonts delivery. Website cookie controls and clearing browser storage affect that browser; desktop content, local agent transcripts and operating-system credential storage are managed through the app or device. Removing authentication storage can sign you out. Planner.li has no advertising networks or cross-context advertising trackers.
Enola
eno.la
Enola websites use no advertising cookies or third-party advertising trackers. Necessary invitation, sign-in and security mechanisms support requested account access. Provider pages and enabled messaging platforms use their own mechanisms. Browser controls can remove cookies but do not delete account, conversation or messaging-consent records; use the deletion commands in the Enola privacy provisions above.
Dueglow
dueglow.com
The public website does not intentionally set advertising or analytics cookies. Infrastructure may use strictly necessary delivery and security mechanisms. Blocking them can affect delivery; browser settings provide removal and blocking controls.
AgentMQ
agent.mq
Public websites use no own advertising or analytics cookies. Necessary delivery/security mechanisms and Adobe Fonts requests remain part of delivery. Account sign-in, chosen interface storage, connected providers and secure checkout can use necessary mechanisms for those requested features, with their respective browser/provider controls.
Agentic.Pay
agentic.pay
Public websites use no own advertising or analytics cookies. Necessary delivery/security mechanisms and Adobe Fonts requests remain part of delivery. Account sign-in, chosen interface storage, connected providers and secure checkout can use necessary mechanisms for those requested features, with their respective browser/provider controls.
Inference.Pay
inference.pay
Inference.Pay uses necessary Clerk sign-in/session and Cloudflare delivery/security mechanisms, browser caching and chosen interface preferences. Adobe Fonts and external checkout providers receive delivery requests. It uses no advertising/cross-site tracking pixels, session replay or non-essential analytics cookies. Browser/provider controls manage these mechanisms; removing sessions can prevent account access.
Bots.Pay
bots.pay · accounts.bots.pay
Bots.Pay uses Clerk __session / __client_uat authentication, Cloudflare __cf_bm where needed for security, chosen local interface preferences and Adobe Fonts requests. Public marketing analytics are aggregate and cookieless, with no persistent visitor identifier or stored analytics IP address. Account processing remains identifiable. Bearer-token API requests do not require cookies. Stripe, PayPal and GitHub pages use their own mechanisms and controls. Removing browser sessions can sign you out; it does not delete hosted agents or balances.
AI Evals
aievals.app
AIEvals sets no own advertising or analytics cookies and uses no advertising pixels, session replay or cross-site analytics. Necessary hosting/security mechanisms, browser caching and Adobe Fonts requests support delivery. Browser settings manage storage; blocking necessary mechanisms may affect the website.
AI Agent Pay
aiagent.pay
AI Agent Pay uses necessary authentication/security mechanisms and chosen interface storage. External sign-in, merchant and checkout pages use their own policies and controls. Browser controls can remove cookies or preferences; they do not revoke an approved transaction or erase required order records.
4dub
4dub.com · accounts.4dub.com
4dub uses necessary sign-in cookies lasting up to seven days and short-lived edge/network-security cookies. It uses no advertising or analytics cookies and no browser storage for tracking. Necessary-only use does not require an optional-cookie banner. Cookie-free event analytics can still be linked to a signed-in account, as described in the privacy provisions. Adobe Fonts and Iconify requests expose normal delivery metadata; plain service emails have no tracking pixels. Browser settings control cookies, with sign-in affected if necessary sessions are removed.
nnu.us
nnu.us
nnu.us uses necessary Clerk authentication, Cloudflare security/delivery and chosen interface preferences. nnu_i18n_redirected remembers language. The opaque nnu_capture_intent cookie supports the Save-to-NNU handoff for approximately 15 minutes; source metadata is staged on the server and the cookie contains no source URL or note. A legacy pending short-link draft in browser storage expires after one hour and is removed after activation.
Cloudflare’s aggregate performance beacon is cookie-free. Server-side Library telemetry uses a pseudonymous Space key and excludes URLs, queries, private text and contact/account/resource identifiers. Adobe Fonts receives ordinary connection metadata. nnu.us uses no advertising cookies or cross-site behavioral advertising. Blocking authentication or handoff storage prevents the related feature; browser controls can clear preferences and pending drafts. Third-party sign-in and payment pages apply their own controls.
TrainShell
train.sh
Necessary browser mechanisms support sign-in, security and chosen preferences. Limited aggregate website measurement excludes terminal content, files, secrets and prompts. Browser storage controls apply to that browser; connected-host credentials and application records must be managed through the relevant account, device or provider controls.
heap.page
heap.page
heap.page uses necessary Clerk sign-in, Cloudflare security and chosen progress, filter, follow and navigation preferences. Cookie-free server measurement uses route/event/status/hour aggregates rather than a browser tracking identifier. Stripe’s selected checkout has its own necessary mechanisms. The current product uses no advertising networks, advertising cookies or session replay. Clearing browser storage can remove saved progress or a pending action and can sign you out.
Outseek
outseek.xyz
| Mechanism | Purpose and duration |
|---|---|
outseek_account |
First-party sign-in, up to 30 days; removed on sign-out |
outseek_conversion |
Optional, encrypted conversion reference; up to 15 minutes and never beyond the next UTC day boundary; Global Privacy Control skips measurement and clears it |
outseek_insights |
Paid-listing source-detail entitlement; no later than the listing’s 30-day expiry |
| Clerk / Cloudflare Turnstile | Necessary sign-in where enabled and protection of the action displaying a challenge |
outseek-client-id-v1 / outseek-owned-source-insights-v1 |
Anonymous-browser continuity and locally submitted source details; until cleared or replaced; at most 100 validated demand identifiers |
outseek-stripe-recovery-v1 |
Checkout reference, recovery secret and secure payment URL; up to 30 days and eight records |
| Pending account actions | Tab-scoped follow, introduction or checkout continuation; removed on completion/expiry; bounded checkout/introduction records expire after approximately 30 minutes |
outseek-commercial-stripe-checkout-recovery-v1 |
Enabled commercial checkout recovery; no later than reservation expiry or 24 hours |
Adobe Fonts receives ordinary request metadata. Outseek uses no third-party advertising/social cookies, email-open pixels or session replay. Clear browser storage to remove local records; this can disrupt sign-in, pending actions, source access or checkout recovery. Global Privacy Control suppresses optional conversion measurement.
Tokens.Pay
tokens.pay
Tokens.Pay uses necessary Clerk authentication (__session and __client_uat where applicable), Cloudflare security such as __cf_bm where needed, and chosen interface preferences. Public-site analytics are aggregate and cookie-free; the optional RShift consent-based visitor-identification mode is not used. Adobe Fonts receives ordinary connection metadata. APIs use bearer credentials rather than browser cookies. Selected Stripe or PayPal checkout pages apply their own necessary controls. There are no advertising cookies, cross-site trackers, marketing pixels or session replay. Browser controls can remove authentication and preferences, which can prevent account features.
Embeddings
embeddings.app
Reading the public catalogue does not require an account or model request. Dashboard and Profile use Clerk’s necessary authentication; APIs use the credentials you provide. Cloudflare delivers and secures the service, and Adobe Fonts receives ordinary connection metadata. The website sets no advertising or analytics cookies. Browser controls can clear sign-in state and preferences; deleting those does not delete hosted documents or account records. A selected external checkout or destination applies its own controls.
Serialize
serialize.dev
Serialize’s public tools do not persist tool inputs or results in browser storage. When a visitor changes the advertising preference, the site stores a first-party localStorage value named serialize.advertising.disabled on serialize.dev to remember that preference. Removing this value or clearing site data removes the preference. If browser storage is unavailable, the tool pages do not request advertising.
Where advertising is enabled, Google AdSense and its partners may use cookies or other identifiers subject to applicable regional privacy choices. Visitors can disable Serialize advertising for future page loads at https://serialize.dev/how-it-works/#privacy, or use ?privacy=1 on an individual tool URL. This site preference does not withdraw a choice previously made through a Google consent message or delete previously stored third-party cookies. Use the configured Google privacy message to review those choices, and browser controls to manage stored cookies. Advertising preferences do not disable application assets, Adobe Fonts or network requests that visitors explicitly run.
The legacy Inspector separately stores saved Recipes and named schema profiles on the device. Clearing its application storage removes those records. Hosting, security and externally requested resources receive ordinary connection metadata. A choice on gridheap.com does not automatically set a preference on serialize.dev.