Skip to content
Safitab

Cookie Policy

Last updated: October 28, 2026

Safitab only uses what is strictly necessary to work. We use no analytics or advertising cookies, so we don’t ask for consent.

1. Cookies

  • app_session — keeps your session (also without an account, to show your result). Valid 30 days with an Account and 7 days without. Not accessible to scripts (HttpOnly).
  • app_csrf — protects forms against CSRF attacks. Valid 1 year.
  • app_oauth_state — only during Google sign-in, valid 10 minutes.

2. Browser storage

Browser storage (localStorage) keeps convenience settings: language (app-lang), theme (app-theme), your last custom export column layout and whether the “What I did” panel is collapsed. They are not sent to the server.

3. Checkout window

When you open checkout, the payment provider’s window may set its own cookies needed to process the transaction and prevent fraud. Its policy describes them.

4. Managing cookies

You can delete or block cookies in your browser settings. Without essential cookies, signing in and showing results won’t work.