Trust
Cookies and tracking
Turn analytics off
Our analytics are first-party, count page views, and never identify you. If you would still rather not be counted, switch it off here. The setting is stored in your browser only, so it applies to this browser on this device, and you will need to set it again in a different browser or after clearing your site data.
Page-view analytics
Counts which pages are visited. No cookies, no profile, no advertising, and never sold or shared.
You may not need the switch at all. This site honors the Global Privacy Control signal and the Do Not Track header. If your browser or a privacy extension sends either one, we record nothing for your visit, with no action from you. That is checked in the code before any request is sent, not applied afterwards.
Everything we store, named
This is the complete list for the public website and the signed-in application. If something is not on this list, we do not store it.
Cookies
One, and it only exists once you sign in.
| Name | Purpose | Type | Lasts |
|---|---|---|---|
cp_session |
Keeps you signed in. It holds a random session reference, never your name, email or password. Marked HttpOnly so no script can read it, Secure so it only travels over HTTPS, and SameSite so it is not sent from another site. | Strictly necessary | Until sign-out or expiry |
That is the only cookie. A signed-out visitor reading the marketing pages has no cookie from us at all.
Browser storage on the public website
These are stored by your browser rather than sent as cookies. None of them identifies you, and none of them is readable by any other site.
| Name | Purpose | Type | Lasts |
|---|---|---|---|
svr_vid |
A random string so a returning visit is not counted as a brand-new one. Generated in your browser, never linked to a person, an account or an email address. | Analytics, optional | Until you clear site data |
svr_sid |
A random string so several page views in one sitting count as one visit. | Analytics, optional | Until you close the tab |
svr_optout |
Records that you used the switch above to turn analytics off. Written only if you ask for it. It is the one thing we store in order to store less. | Your preference | Until you switch it back on |
svr_owner |
Marks a browser as belonging to us, so our own visits are excluded from our figures. Set only by visiting with a special link we use ourselves. | Internal | Until removed |
Browser storage inside the application
These exist only once you are signed in, and only to make the app behave sensibly. None is analytics and none leaves your device.
| Name | Purpose | Type | Lasts |
|---|---|---|---|
cp_visits |
Counts how many times you have opened the app, so the "add to home screen" prompt waits until you have actually used it rather than appearing on your first visit. | Functional | Until you clear site data |
cp_install_dismissed |
Remembers that you dismissed that prompt, so it does not ask again. | Functional | Until you clear site data |
cp_focus |
Remembers which field to scroll to and highlight when a task sends you to a settings screen. | Functional | Cleared on use |
cp_assist |
Present only during a support session you have explicitly asked us to open, and only in that tab. It marks the session as our read-only support view. Every attempt to change anything during it is refused by the server. | Functional | Until you close the tab |
What is not here
Stated explicitly, because the absence is the point and an absence is hard to verify by looking.
- No advertising or retargeting technology. No advertising pixel, no conversion tag, no remarketing list. If you clicked an advert to get here, we record which campaign the link named, and nothing that lets anyone follow you afterwards.
- No third-party analytics company. The page-view count is our own code posting to our own server. Nobody else receives it.
- No social network buttons or embeds on our pages, which are a common way a tracker arrives without anyone intending it.
- No session recording, heatmaps or keystroke capture. We do not watch you use the site.
- No fingerprinting. We do not attempt to identify a device by its configuration.
- No trackers inside the signed-in application at all. Where your customers' names, addresses and documents are is not a place we will put someone else's code.
- No selling or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising, as the state privacy laws define those terms. There is nothing for you to opt out of, and we say so in the privacy rights section rather than leaving you to wonder.
What our server records, which is not storage on your device
Separate from anything in your browser, our server keeps an operational log of requests so we can find faults and keep the Service up. It is worth describing because people reasonably assume the worst about server logs.
A log line holds the request method, which route pattern was hit, the response status, how long it took, how many bytes moved, how much database work it cost, and numeric identifiers for the workspace and user. By design it never contains a name, an email address, an IP address, a session token, a password or any document. Sign-in events, signatures and other sensitive actions are recorded separately in an audit trail, and those records do include an IP address and timestamp, because that is precisely what makes a signature defensible later.
The Privacy Policy sets out how long each category is kept and what you can ask us to do with it.
Other ways to control this
- Your browser can block or clear cookies and site storage for this site. Blocking the session cookie will stop you being able to sign in, because that is the cookie that keeps you signed in; everything else on this page can be blocked with no loss.
- A privacy extension or browser setting that sends Global Privacy Control will switch our analytics off automatically, everywhere, without you visiting this page.
- Ask us. Email [email protected] with "Privacy request" in the subject and we will answer a specific question about any of this.
Last reviewed 29 September 2026. If we ever add anything that tracks you, this page changes before it ships, not after.