Cookies and browser storage

Necessary cookies

sign_session keeps you signed in for up to 30 days. sign_csrf protects forms against forged requests for 30 days. On HTTPS their names begin with __Host-. These cookies use HttpOnly and SameSite=Lax; HTTPS cookies also use Secure.

Appearance and language

When you choose a theme, sign-theme in local storage remembers light or dark on this host until you clear browser storage. Without a saved choice, appearance follows your device. If storage is blocked, the toggle still works for the current page. Language is part of the URL; no language cookie is used.

Visit measurement (only with your permission)

On five public pages (the home page, “How it works”, the terms, the privacy notice and this page) we measure visits with Google Analytics through Google Tag Manager, only if you allow it. Until you choose, or if you decline, nothing is loaded from Google’s servers and there are no Google cookies. There is never any measurement on the sign-in and sign-up pages, the account and document pages or the signers’ pages.

The sign_measure cookie keeps your choice for 6 months (on HTTPS named __Host-sign_measure; HttpOnly, SameSite=Lax, on HTTPS also Secure).

If you allow measurement, Google Analytics sets the cookies _ga (tells visitors apart) and _ga_<id> (keeps the state of a visit), which last 2 years by default. Google receives the data. We do not allow advertising cookies.

Your controls

You can change your choice about measurement at any time below. You can also delete or block cookies and local storage in your browser; this may sign you out. We do not use advertising cookies.