This Cookie Policy explains how Document Blueprint ("we", "us", "our") uses cookies and similar tracking technologies on our website and within the service.
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve performance, and remember information about you (such as your login status or preferences).
The cookies listed below are first-party: they belong to our own domain. We do not use advertising cookies or share cookie data with ad networks.
These cookies are required for the service to function. You cannot opt out without losing access.
| Cookie | Purpose | Retention |
|---|---|---|
session | Authenticates you across page loads. Set when you sign in. | 5 days |
_legal_consent | Stores your cookie-banner choice so we don't show the banner repeatedly. | 1 year |
These cookies help us understand how the service is used so we can improve it. Set only if you accept analytics in the cookie banner.
| Cookie | Purpose | Retention |
|---|---|---|
_ga | Google Analytics 4 client identifier. | 2 years |
_ga_* | Google Analytics 4 session and event tracking. | 2 years |
x_attr | Remembers the marketing source that brought you to the site (campaign parameters, referrer, and landing page for your first and most recent visit), so we can attribute signups to marketing sources. Recorded only while you are signed out; saved to your account when you sign up, and deleted when you sign in. | 90 days, or until you sign in |
We use Google Analytics 4 via Google Tag Manager. When you are signed in, we also send Google Analytics your account's internal user ID (never your name or email), so your visits from different devices count as one user. We do not enable Google Signals or ad personalization.
A single random identifier assigns you to experiment variants on marketing pages, so you see the same version on each visit. Set only if you accept experiments in the cookie banner.
| Cookie | Purpose | Retention |
|---|---|---|
x_rid | Random identifier used to assign A/B variants on marketing pages. Not linked to your account. | 90 days |
We do not currently set any marketing or advertising cookies. The marketing category is reserved in our cookie banner for future use; if we ever add marketing cookies, you will be notified and asked to consent before they are set.
The app also keeps some information in your browser's local storage, session storage and IndexedDB.
| What | Purpose | Kept until |
|---|---|---|
| Sign-in state | Firebase Authentication keeps you signed in on this browser (IndexedDB). While you are signed in, Firebase App Check keeps a short-lived token proving requests come from our app, and Google reCAPTCHA Enterprise, which issues that token, may set its own cookie. Firebase also notes the days its libraries ran, which it reports with its own requests. | You sign out |
| Your place in the app | The workspace, template, case and mailbox you last had open, and the last email you composed in each workspace (subject, body and recipients), so the next one can start from it. | You sign out |
| A spreadsheet you are importing | A list you drop into the assistant, held until you import or discard it. | You import or discard it, or sign out |
| Your location | Only if you share it in Settings: used for the map and for finding nearby cases. | You stop sharing it, or sign out |
| Case list cache | Up to 60 cases from your dashboard, so it shows immediately when you reload (session storage). | You close the tab, or sign out |
| Display preferences | Theme, time zone, distance unit, panel widths, sort and filter choices, which product tours you have seen, and a count of this week's template runs used for in-app suggestions. | You clear your browser data |
Everything tied to your account is removed when you sign out, and when a different account signs in on the same browser. Display preferences stay on the device.
If you accept analytics, Firebase Performance Monitoring measures page-load speed in your browser. It stores a random installation identifier in your browser's IndexedDB (firebase-installations-database) and two configuration entries in local storage (@firebase/performance/config and @firebase/performance/configexpire). These are removed or stop being used when you withdraw analytics consent at /legal/preferences.
You can change your preferences at any time:
When you turn a category off, we delete its cookies right away. Turning analytics off also reloads the page, so Google Tag Manager stops running.
Some browsers send a "Do Not Track" signal. Because no industry standard for interpreting this signal exists, we do not respond to it. We do honor Global Privacy Control (GPC) signals, as described above.
If we add new cookies or change how we use them, we will update this policy and require re-consent where necessary.
Privacy inquiries: privacy@documentblueprint.com