Submission Desk · Legal
Cookie & Local Storage Policy
1.The short version
We use only what the Service needs to work: a cookie that keeps you signed in, a short-lived cookie while you connect Outlook, and a few preferences saved in your browser. No advertising cookies, no analytics trackers, no tracking pixels, no third-party cookies. Because everything here is strictly necessary or a preference you set yourself, we don't show a consent banner for tracking.
2.Cookies
| Name | Purpose | Type | Duration |
|---|---|---|---|
better-auth.session_token | Keeps you signed in and identifies your session securely. HttpOnly, SameSite=Lax. | Strictly necessary (first-party) | Up to 7 days, renewed while you're active; removed when you sign out |
better-auth.session_data | Signed cache of session details to avoid a database lookup on every request. Only set if session caching is enabled. | Strictly necessary (first-party) | A few minutes |
outlook_oauth | Holds an encrypted one-time security value while you connect Outlook, to protect the connection from forgery. | Strictly necessary (first-party) | 10 minutes, or until the connection completes |
In production, session cookies carry the __Secure- prefix (for example __Secure-better-auth.session_token), which means browsers send them only over HTTPS. Microsoft may set its own cookies on its sign-in pages; those are governed by Microsoft's policies.
3.Local storage
| Key | Purpose | Type | Duration |
|---|---|---|---|
theme | Your Day / Night / Match system choice. | Preference | Until you clear it |
sd-prefs | Display preferences such as motion, density, and text size. | Preference | Until you clear it |
sd-cookie-notice | Remembers that you dismissed this notice so we don't show it again. | Preference | Until you clear it |
Local storage stays in your browser. It is never sent to our servers and contains no client data.
4.How to clear them
Signing out removes the session cookie. To remove everything, clear cookies and site data for this site in your browser settings (in most browsers: Settings → Privacy → Cookies and site data). Blocking the session cookie will prevent you from signing in; clearing local storage just resets your display preferences.
We honor Global Privacy Control signals; see the Privacy Policy.
5.Changes
If we ever add a cookie or storage key that isn't strictly necessary, we will update this page first and, where the law requires, ask for your consent before setting it. Questions: [privacy@yourdomain.com].