Cookie Policy
Last updated: August 10, 2026
1. The short version
Cookies are small text files a site stores in your browser. Many sites use them to track you across the web; we don’t. Every cookie FairSign sets is first-party — it works only on our site, never talks to an ad network, and is listed in full below. Most are strictly necessary to run the product; two (your theme and language) are set only when you change them, and one (referral credit) is set only if you choose to sign up through a referral link. Check the Kind column to see which is which.
2. Every cookie we set
| Cookie | What it does | Lifetime | Kind |
|---|---|---|---|
| sb-*-auth-token | Your login session (set by our auth provider, Supabase, on our own domain). Without it you'd have to log in on every page. | While you stay logged in; cleared on sign-out | Essential |
| fs-theme | Remembers your light/dark theme choice. Only set once you toggle the theme. | 1 year | Preference |
| fs-locale | Remembers your language (English, Deutsch, Español). Only set once you pick one. | 1 year | Preference |
| fs_sa_* | Set after you correctly enter the access code on a protected signing link, so you don't have to re-enter it on every step. Contains a cryptographic proof, never the code itself. | 1 hour | Essential |
| fs_ref | Set only when you choose to sign in through a referral link — the feature you asked for by using that link — so the person who invited you gets their referral credit. Holds the inviter's code, is deleted as soon as your sign-in completes, and is never used for advertising or cross-site tracking. It's the one non-essential cookie we set — skip it by not using a referral link, or delete it any time. | 30 days, deleted once your sign-in completes | Functional |
3. What we don't use
FairSign runs zero analytics cookies, advertising cookies, social plugins, or third-party trackers. The only non-essential cookie we set is the referral cookie listed above, and it is set solely when you choose to sign up through someone’s referral link — never in the background, never for tracking. Skip it by not using a referral link, or delete it any time. If we ever add a tracking or analytics cookie, we will update this page first and put a real consent choice in front of you before setting it, not after.
4. Local storage (not cookies, listed anyway)
We store your answer to the cookie notice (fs-cookie-notice) in your browser’s localStorage so the banner doesn’t reappear on every visit. It never leaves your browser. When you self-sign a document, the file and your signature are likewise processed only in your browser’s memory — see the Privacy Policy.
5. Controlling cookies
Every browser lets you view, block, and delete cookies (usually under Settings → Privacy). You can clear ours freely: the worst that happens is you’re logged out, your theme and language reset, or you have to re-enter a document’s access code. Questions about any of this: [TODO: CONTACT_EMAIL].