Legal
Cookie policy
Last updated:
Cookies are small files a website stores in your browser. Local storage and session storage are similar places in your browser. askPDF uses all three, and this page lists what askPDF and its providers store on askpdf.net. Analytics cookies are set only if you accept them.
1. Cookies we need
These keep you signed in and keep the site secure. They are needed to give you the service, so they are set without asking. The sign-in cookies are set by askpdf.net for Kinde, our sign-in provider, and are marked HttpOnly (a script in the page cannot read them), Secure and SameSite=Lax.
| Name | Set by | What it is for | How long |
|---|---|---|---|
access_token, id_token, refresh_token | askpdf.net, for Kinde, our sign-in provider | Keep you signed in. A long value is split over several cookies, whose names end in a number (for example access_token1) | Up to 29 days |
ac-state-key, post_login_redirect_url | askpdf.net, for Kinde | Complete a sign-in safely and send you back where you were | Until the sign-in is finished (up to 29 days if you leave it half done) |
cookieyes-consent | CookieYes, our cookie banner | Remember your cookie choice | Up to 1 year |
__cf_bm | Cloudflare, in front of askpdf.net, when its bot protection is on | Tell people from bots and protect the site from attacks | 30 minutes |
cf_clearance | Cloudflare, after a security check | Remember that you passed a security check, so it is not asked again at once | As set in our Cloudflare account |
_cfuvid, __cfruid | Cloudflare, when a rate limit is on | Tell visitors apart, so that one visitor cannot overload the site | Until you close your browser |
Kinde’s own sign-in pages may set cookies of their own to run the sign-in, and Stripe’s pages do the same for payment security. They are set by those companies, not by askPDF: see Kinde’s privacy policy (opens in a new tab) and Stripe’s cookies policy (opens in a new tab).
2. Settings we remember for you
These remember how you like askPDF to look. They stay on your device, and are not sent to any other company. The one exception is the cookie askpdf.docs: it goes to our own servers, with each request for a page under /dashboard, so that the page can be drawn with the list of documents open or closed. You can delete all of these in your browser at any time.
| Name | Kind | What it is for | How long |
|---|---|---|---|
currTheme | Local storage | Your choice of light, dark or system theme | Until you delete it |
askpdf.libraryView | Local storage | Whether your library is a table or a grid | Until you delete it |
askpdf.pdfShare | Local storage | How wide the PDF and the chat are next to each other | Until you delete it |
askpdf.signinMethod | Local storage | Which sign-in method you used last (only the method, never your email), so that an ended session can go back through it. Strictly necessary for signing back in | Until you delete it |
feedbackPromptHistory | Local storage | Which documents you have already been asked for feedback on, so you are not asked twice | Until you delete it |
askpdf.docs | Cookie, on /dashboard | Whether the list of documents beside a chat is open or collapsed | 1 year |
3. Analytics, only if you accept
These measure how askPDF is used, so we can fix and improve it. Nothing here is set, and Google’s analytics code is not even loaded, until you accept analytics in the cookie banner. If you refuse, or the banner cannot load, they stay off.
| Name | Set by | What it is for | How long |
|---|---|---|---|
ph_… (a cookie, and entries in local storage and session storage), __ph_opt_in_out_… | PostHog (EU cloud) | Recognise a browser between visits and count pages visited. Outside the app it also records clicks. In the app we switch off the tools that record clicks and what is on screen. | Cookie: up to 1 year. Local storage: until you delete it. Session storage: until you close the tab |
_ga, _ga_… | Google Analytics | Count visitors and the pages they visit | Up to 2 years |
4. Change your choice
You can change or withdraw your consent at any time. Choose “Cookie preferences” here, or in the menu at the foot of the sidebar when you are signed in. Withdrawing turns analytics off again and does not affect what was done before.
Your browser also lets you see, block and delete cookies. If you block the sign-in cookies in the first table, you cannot sign in.
5. More information
How we handle personal data is in the privacy policy. Questions about cookies: [email protected].