In short
- Nothing except strictly necessary storage runs before you choose.
- “Reject all” is as easy as “Accept all”, and you can choose by category.
- We honor the Global Privacy Control signal as a refusal of advertising.
- Your choice is kept for 6 months, then we ask again.
What cookies are
Cookies are small text files that a website stores in your browser. Similar technologies include pixels, tags, local storage, and software development kits in apps. In this policy, “cookies” covers all of them. We do not use browser fingerprinting.
This policy covers insigner.co, app.insigner.co, and sign.insigner.co. It follows the EU ePrivacy Directive, the GDPR, the guidelines of the European Data Protection Board, the UK Privacy and Electronic Communications Regulations, and U.S. state privacy laws.
How consent works
When you first visit the marketing website, a banner lets you accept all cookies, reject all optional cookies, or choose by category. Both main buttons have the same size and weight. Optional cookies stay off until you accept them, and closing the page without choosing counts as no consent.
You can change or withdraw your choice at any time through the “Cookie settings” link at the bottom of every page. When you withdraw consent, we stop the tags and delete the first-party cookies they set on our domain. Your choice is stored for 6 months, and we ask again after that or when we add a new category or provider.
If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising cookies and of the sale or sharing of your personal data for that browser.
Google Consent Mode
We use Google Consent Mode version 2. Before you choose, the ad_storage, ad_user_data, ad_personalization, and analytics_storage signals are set to “denied”, and Google Tag Manager is not loaded. When you accept a category, we update only the matching signals. We do not send cookieless measurement pings to Google before consent. Microsoft Advertising, Microsoft Clarity, Meta, and TikTok receive the same choice through their consent settings.
Categories
We group cookies into three categories:
- Strictly necessary: needed for security, to keep you signed in, to complete a signing request, and to remember your cookie choice. They cannot be switched off, and they do not require consent.
- Analytics: help us understand how visitors use the website so we can improve it. Provided by Google Analytics and Microsoft Clarity. Off by default.
- Advertising: measure the results of our ads and show relevant ads on other sites. Provided by Google Ads, Microsoft Advertising, Meta, and TikTok. Off by default.
Cookies we use
The table shows the main cookies. Durations are maximums. Providers can change cookie names, and we update this list when they do.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| insigner_consent | inSigner | Stores your cookie choices | 6 months | Necessary |
| Workspace session | inSigner (app.insigner.co) | Keeps you signed in and remembers the selected workspace | Until you sign out or the session expires | Necessary |
| Signing session | inSigner (sign.insigner.co) | Keeps a signing request open until it is completed | Session | Necessary |
| __cf_bm | Cloudflare | Distinguishes people from bots | 30 minutes | Necessary |
| cf_clearance | Cloudflare | Remembers that a security challenge was passed | Up to 1 year | Necessary |
| _cfuvid | Cloudflare | Applies rate limits fairly | Session | Necessary |
| _ga | Google Analytics | Distinguishes visitors | 13 months | Analytics |
| _ga_<ID> | Google Analytics | Keeps the state of a session | 13 months | Analytics |
| _clck | Microsoft Clarity | Keeps the Clarity visitor identifier | 12 months | Analytics |
| _clsk | Microsoft Clarity | Connects page views into one session | 1 day | Analytics |
| CLID | Microsoft Clarity (clarity.ms) | Identifies a first Clarity visit | 12 months | Analytics |
| _gcl_au | Google Ads | Links ad clicks to sign-ups | 90 days | Advertising |
| _gcl_aw | Google Ads | Stores the ad click identifier | 90 days | Advertising |
| IDE | Google (doubleclick.net) | Ad delivery, measurement, and remarketing | 13 months | Advertising |
| _uetsid | Microsoft Advertising | Links a visit to an ad click | 1 day | Advertising |
| _uetvid | Microsoft Advertising | Recognizes a returning visitor for ad measurement | 13 months | Advertising |
| MUID | Microsoft (bing.com, clarity.ms) | Identifies a browser across Microsoft services | 13 months | Advertising |
| _fbp | Meta | Identifies a browser for ad measurement | 90 days | Advertising |
| _fbc | Meta | Stores the ad click identifier | 90 days | Advertising |
| fr | Meta (facebook.com) | Ad delivery and measurement | 90 days | Advertising |
| _ttp | TikTok | Measures ad performance | 13 months | Advertising |
| _tt_enable_cookie | TikTok | Checks whether cookies can be set | 13 months | Advertising |
| ttcsid, ttcsid_<ID> | TikTok | Groups ad events from the same visit | 13 months | Advertising |
Google Tag Manager itself does not set cookies. It only loads the tags you accepted. We configure Google Analytics cookies to expire after 13 months, and IP addresses are not logged or stored by Google Analytics 4.
Microsoft Clarity
Clarity records mouse movements, clicks, and scrolling on our marketing pages, and shows heatmaps, so we can find pages that are hard to use. It masks text that people type into forms. We do not use Clarity in the workspace, on signing pages, or on any page that shows a document.
Third-party providers
Google, Microsoft, Meta, and TikTok may combine the data from their cookies with other data they hold, under their own privacy policies. You can also manage ads through their tools and industry tools:
- Google: myadcenter.google.com and the Google Analytics opt-out add-on at tools.google.com/dlpage/gaoptout.
- Microsoft: account.microsoft.com/privacy/ad-settings.
- Meta: the Ad Preferences section of your Facebook or Instagram account.
- TikTok: the Ads settings in the Privacy section of the TikTok app.
- Industry tools: youronlinechoices.eu in Europe, optout.aboutads.info and optout.networkadvertising.org in the United States, and youradchoices.ca in Canada.
Browser controls
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in and signing from working. Blocking cookies in the browser does not remove your consent choice on our side, so use the “Cookie settings” link to change it.
Mobile apps
When the iOS and Android apps are released, they will not include analytics or advertising software unless you allow it. On iOS, any tracking will require Apple’s App Tracking Transparency permission.