Cookie Notice
Effective Date: 2 October 2026
Last Updated: 2 October 2026
Version: 2026-10-02
1. In short
We use only the cookies and browser storage that the Service needs to work. We do not use analytics, advertising or cross-site tracking cookies, we do not load third-party scripts, fonts or trackers on our pages, and the public pages of our website do not set any cookie when you are signed out. Because every item below is strictly necessary to provide something you ask for, we do not show a cookie banner and your consent is not needed.
2. What the Service sets
| Name | Where | What it does | How long |
|---|---|---|---|
| Authentication session cookies. Their names begin with "sb-" | A cookie, set only after you sign in | Keep you signed in and let us check, on every request, that your session is live | Until you sign out or your session ends. The Service also ends sessions that are idle or old, and a cookie that has outlived its session no longer works. Your browser may keep the expired cookie until you clear it |
| An upload resume record. Its name begins with "mandateroom.multipartUpload." | Your browser's local storage on your own device, set only when you upload a large file | Lets an interrupted upload of a large file continue where it stopped instead of starting again. The record holds the room, folder and file name and size, so that the same file can be recognised | Until the upload completes or you cancel it. You can delete it in your browser settings; if you do, an interrupted upload simply starts again |
3. What we do not use
We do not use advertising cookies, analytics or session-replay tools, social-media plug-ins, tracking pixels, fingerprinting or any third-party cookie. Our content-security policy lets the browser load scripts, styles and fonts from our own site only, and lets it load images and make connections only to our own site and to our authentication and database provider, which also serves the page images shown in the document viewer.
4. Your choices
You can block or delete cookies and local storage in your browser settings. If you block the session cookies, you cannot sign in, because the Service has no other way to know who you are. Signing out removes the session cookies.
5. If this changes
If we add a cookie or a script that is not strictly necessary, we will update this notice and our Privacy Policy before we do, and, where the law requires, ask for your consent first. Questions: hello@mandateroom.com.