Cookies are not the only way a site can store something on your device. Local storage, session storage and similar techniques do the same job, and the law treats them the same way: what matters is whether information is stored on your device or read from it, not what the technique is called.

So this page lists everything 2on puts in your browser, whatever the technique. Data we hold on our own servers is covered by the Privacy Policy.

One cookie is set on every visit. It holds no identity and no tracking value: it links your browser to a short-lived security token that lets forms tell a genuine submission from a forged one. Without it the contact form could be abused from other sites.

The randomizer tools save the lists you type so that reloading the page does not wipe out fifty names. This is your own input, stored on your own device in local storage, and it is never sent to us or to anyone else.

You can erase it at any moment with the Clear list button inside the tool, or by clearing site data in your browser.

2on currently uses Google Analytics to see which tools people actually use. It sets the cookies below and sends Google your IP address and information about your device.

If you would rather not be counted, you can block these cookies in your browser settings, use Google's official opt-out browser add-on, or browse in a private window. Blocking them changes nothing about how the tools work.

Only one thing on this site is not served by us. It sets no cookie of its own by default, but it does see your IP address.

• Cloudflare stands in front of the site as a proxy, so every request passes through it, and it may set a short-lived cookie of its own to filter automated traffic.

Everything else - styles, scripts, icons and images - comes from this site. In particular, no web font is downloaded: the text you are reading uses a font your device already had, so no request goes to a font provider.

Every browser lets you view and delete what a site has stored, block cookies from certain sites, or clear everything when you close it. The setting is usually under Privacy or Site settings.

Blocking analytics changes nothing here. Blocking the session cookie also leaves the tools working, but the contact form will refuse to submit, because the security check it depends on cannot run.

This list is meant to match what the site actually does. If something is added or removed, the table above and the date at the top of the page change with it.