Cookie Dough

Local by design

Privacy, without
the crumbs.

This policy explains how the Cookie Dough Chrome extension handles information when it operates cookie-consent controls.

Privacy policy · Extension version 1.4.1 · Updated 18 September 2026

No account. No extension analytics. No data sales.
Settings stay in your browser. The extension does not send webpage contents or extension data to the publisher or third parties.

1. What happens on your device

Cookie Dough reads portions of webpages locally to identify cookie-consent interfaces and apply your chosen preference. It reads the current website’s hostname to apply website exclusions and show site controls.

The extension does not record a general URL browsing history, send webpage contents anywhere, or operate an extension server.

2. What is stored locally

Settings, excluded domains and aggregate counters are stored in this browser using Chrome local extension storage. These settings are not synchronised through Chrome Sync.

An optional diagnostic log can hold up to 200 timestamped events about detection, classification, attempted actions and outcomes. Logging is off by default.

What the diagnostic log contains

Entries use packaged platform names, fixed rule and reason codes, actions, and boolean evidence flags. They do not include raw domains, URLs, page text, arbitrary selectors or identifiers from a website.

Fixed publisher-specific platform names or rule IDs can still imply which publisher’s notice was handled. Optional diagnostics are limited local metadata, not a zero-information record.

Repeated entries are deduplicated and limited to 30 per tab and 120 overall in a one-minute worker window. Temporary rate-limit state contains tab IDs and fixed metadata, and resets when the worker restarts.

Random duplicate-event IDs are kept temporarily in Chrome session storage. A narrowly supported Care Inspectorate Wales preference journey also stores a tab ID, submission flag and a two-minute expiry in extension session storage, without URLs or page text. Journey records are cleared on completion or configuration changes, pruned on a later journey, and discarded at the end of the browser session.

3. No tracking or data sales

Cookie Dough has no user account, analytics, advertising trackers, advertising SDK, reporting service or remote executable code. It does not sell personal information, transmit webpage content, collect a general browsing history or share extension data with third parties.

4. Your controls, retention and deletion

  • Change behaviour, pause the extension or manage excluded websites in Settings.
  • Reset counters or clear diagnostic events in Settings.
  • Turning logging off stops new events. Existing events remain until cleared or displaced by the 200-event limit.
  • Settings and statistics stay until changed, reset or the extension is removed. Chrome manages extension storage deletion on uninstall.

Excluded domains are user-configured settings, not an automatically collected record of visits. Counters describe observed interface outcomes, not blocked tracking.

Diagnostics distinguish a disappearing notice from an independently verified consent state. Disappearance alone does not establish that a website honoured a preference. Logs are limited summaries: duplicate suppression, caps, cancellation and frame changes can omit events.

5. Choices made on websites

Cookie Dough activates consent controls on websites. A website or its consent provider may store or transmit the resulting choice under its own policies, just as when you click the same control. Those requests originate from the website, not an extension server.

Acceptance fallback is enabled by default. It can allow optional cookies and tracking when no usable free refusal is identified, including on supported accept-or-pay notices. It never purchases a subscription. Turn acceptance fallback off in Settings for strict rejection.

Informational notices may be dismissed without a consent choice. Hide only records no consent choice and may leave tracking active. Reject mode cannot guarantee that a website honours your preference, remove cookies already stored, or undo previous consent.

6. Limited use

Information accessed by Cookie Dough is used only for its disclosed purpose of handling consent notices and providing local controls. It is not used for advertising or unrelated purposes and is not transferred by the extension to others.

This use follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

7. Scope and contact

This policy covers the Cookie Dough extension. Websites you visit and the website hosting this page may have separate privacy practices, including hosting logs. Their processing is not controlled by the extension.

Cookie Dough is published by Fydo.co.uk. For support or questions about this policy, email developer@fydo.co.uk.

Changes to this extension policy will be reflected on this page with an updated date.