Cookie Policy
Last updated: May 2026
What cookies are
Cookies are small text files placed on your device by your browser when you visit a website. We use cookies and similar local-storage technologies to keep you signed in, remember your choices, and measure how the site is used. Some cookies are essential for the site to work; others run only after you agree.
Cookies we set
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| paperwork-cookie-consent | paperwork.to | Stores your cookie banner choice (analytics on/off) so we do not ask again. | 12 months | Essential |
| paperwork-anon-id | paperwork.to | Anonymous client identifier used to attach your consent record to a stable ID without revealing your identity. | 24 months | Essential |
| sb-* (Supabase Auth) | paperwork.to | Keeps you logged into the dashboard. Only set after you sign in. | Session + refresh token | Essential |
| _ga, _ga_* | Google Analytics 4 | Distinguishes unique visitors and sessions for site analytics. IP truncated before storage. | 13 months | Analytics |
| _ym_uid, _ym_d, _ym_isad | Yandex Metrika | Anonymous visitor identification and session tracking for analytics. Set only after consent. | 12 months | Analytics |
| _vercel_* | Vercel Analytics | Page-view and Web Vitals measurement. Privacy-friendly, no cross-site tracking. | 24 hours | Analytics |
Categories explained
- Essential. Required for the site to function — keeping you signed in, remembering your cookie choice, securing forms. These are always on and do not require consent.
- Analytics. Help us understand which pages people read and where they drop off. Only set after you click Accept allor enable Analytics in the cookie banner.
- Marketing. Reserved for future ad-network pixels. Currently unused. We will not enable any marketing cookie without asking again first.
Third parties
Analytics cookies are set by these processors. Each is bound by data processing terms aligned with UAE PDPL and applicable EU/UK rules.
- Google Analytics 4 — Google Ireland Limited, Dublin (operator), Google LLC, US.
- Yandex Metrika — YANDEX LLC, Netherlands.
- Vercel Analytics — Vercel Inc., US.
We do not run advertising trackers (Meta Pixel, LinkedIn Insight, TikTok Pixel, etc.). If we ever add one, the banner will reappear and ask you to opt in.
Change or withdraw your choice
You can reset your cookie preferences any time. We will show the banner again on your next page load.
You can also clear cookies and local storage directly in your browser settings. Doing so will sign you out of the dashboard and re-show the banner.
More information
Read our privacy policy for how we handle personal data overall, including the documents you upload, retention periods, and your PDPL rights.