Qodoonect Trust
Draft — pending legal review. These documents are drafts provided for transparency while an internal legal review is completed.

Cookie Policy

Cookies and similar storage technologies (localStorage, indexedDB) are used by Qodoonect Trust to keep you logged in, remember preferences, and understand how the Service is used. This policy lists each category and how to control it.

1. Strictly necessary

Always on — required for the Service to function. No consent needed.

  • sb-access-token, sb-refresh-token — Supabase auth session, scoped to .qodoonect.com for single sign-on across sister properties.
  • workspace_id — currently selected workspace.
  • csrf — anti-CSRF token for state-changing requests.

2. Functional

Improves usability; on by default, can be disabled in settings.

  • UI density, theme, language preferences.
  • Recently used templates, signers, identity providers.

3. Analytics

Off by default. We do not run third-party trackers. If self-hosted Plausible is enabled, it stores no cookies and uses anonymised aggregate counters.

4. Marketing

We do not currently set marketing cookies. Email newsletters require an explicit opt-in and contain a one-click unsubscribe link.

5. Managing cookies

You can clear cookies in your browser settings, refuse non-essential cookies via the consent banner, and revoke consent at any time from Settings → Privacy. Disabling strictly necessary cookies will sign you out and may break the Service.

6. Cross-domain SSO

Auth cookies are set on the apex .qodoonect.com domain so a single sign-in covers platform.trust.qodoonect.com, knowledge.qodoonect.com, hive.qodoonect.com, and other Qodoonect properties.

Last updated: 2026-05-07. Document version: draft-0.1.