The short version
Attestloom sets cookies only to keep you signed in, protect forms against forgery, and remember which workspace you are working in. We use no analytics, advertising, or third-party tracking cookies on attestloom.com or in the app.
Cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
authjs.session-token | Keeps you signed in (an encrypted session token, HttpOnly, Secure) | 30 days |
authjs.csrf-token | Protects sign-in forms against cross-site request forgery | Session |
authjs.callback-url | Returns you to the page you were on after sign-in | Session |
al_ws | Remembers the active workspace when you belong to more than one | 1 year |
Local storage
The app does not store customer content in your browser. Files you export are downloaded directly and are not cached by Attestloom.
Your choices
You can block cookies in your browser, but you will not be able to sign in. Questions go to privacy@attestloom.com.