Cookies policy
In effect since September 9, 2026.
Everything this site stores in your browser, what each item is for, and how long it lasts.
The short version
We set 3 cookies and every one of them is strictly necessary to run the service. None is used for advertising, none follows you between sites, and none is shared with anyone. That is why you have never been asked to dismiss a cookie banner here — there is nothing to consent to, and a banner asking you to accept things that are required anyway would be theatre.
Our cookies
lightfast_session
Keeps you signed in. Without it every page would ask you to log in again, which is the service you asked for by logging in at all.
Lasts: Until you sign out, or it expires after 7 days.
lightfast_webauthn_challenge
Holds the one-time value your device signs when you sign in with, or register, a passkey. It is what stops someone replaying an old response.
Lasts: 5 minutes, and it is deleted the moment it is used.
lightfast_webauthn_stepup_challenge
The same, for the extra confirmation asked before a sensitive change such as deleting your account. It is separate from the one above because both ceremonies can be in flight at once.
Lasts: 5 minutes, and it is deleted the moment it is used.
All 3 are HTTP-only, so your browser will not expose them to scripts running on the page, and they are only sent over HTTPS.
Third parties
2 other services can run in your browser. Neither is advertising, and neither receives your documents — nothing does.
Cloudflare Turnstile
The “confirm you’re human” check. It stops the sign-up and contact forms being used to send mail in your name, or in a stranger’s. It may store something of its own to run that check.
Stores: Set by Cloudflare, not by us.
Where: The sign-up and contact pages only.
Plausible analytics
Counts page views so we know which pages are worth writing. It sets no cookies and does not follow you between sites — it cannot tell one visitor from another.
Stores: Nothing is stored in your browser.
Where: Public pages only. It is never loaded once you are signed in.
Turning things off
The 3 cookies above cannot be switched off: without them you cannot stay signed in, and a passkey cannot be used at all. A browser can block them, and the result is a service that does not work rather than one that works more privately.
Analytics is different, and it is the one thing on this page you can decline. It requires no consent — it sets nothing and cannot tell one visitor from another — but not needing to ask and offering no way to decline are different positions, and only one of them is defensible for a product sold on privacy. The switch is here:
Anonymous page counts
Plausible, on public pages only. No cookies, no cross-site tracking, and it cannot tell one visitor from another — which is why we are allowed to run it without asking. You can still say no.
Reading your current setting…
Not stored, and worth saying
Your documents. They are read into the page, processed there, and handed back. Nothing about a file you protect, verify or compare is written to your browser's storage or sent to us — see the privacy policy for what we do handle.
The downloadable tools are a separate case: they keep your issuance log in that browser's local storage, because they have nowhere else to put it and no server to talk to. That is described in the tools themselves, which include a button to erase it.