P7M in PDF
Back to home

Cookies and browser storage

Necessary technology for language, sign-in, preferences and local recovery.

Last updated: 2026-10-10

Page status

This page describes the current technical design. Controller details, contacts, active providers and final disclosures must be verified in the Privacy notice before paid launch.

Necessary storage

  • Language uses a cookie and localized URL.
  • Sign-in uses Better Auth’s secure session cookies; duration depends on operator configuration.
  • Guest Single Export uses the necessary HttpOnly, SameSite=Lax cookie p7m_guest_access for up to 365 days, with Secure on HTTPS. It identifies a purchase and is not used for advertising.
  • Pending order number, file digest and start time remain locally for at most 10 minutes, without files or payment-form secrets. An explicitly saved recovery-code file is in your custody and can restore the same file’s rights in another browser.
  • Theme and a logical browser identifier are local preferences; device fingerprinting is not used.
  • A verifiable download license may stay locally for at most 24 hours and never past a paid yearly period. Lifetime and Single Export rights do not expire, but their offline licenses must be refreshed online. It is not an account authentication token.
  • Optional input recovery uses IndexedDB. Recovery eligibility lasts 15 minutes; the browser may still reject or delete data.
  • Public app resources may be cached for later offline opening. Personal files, APIs, accounts and payments are excluded from this cache.

Managing site storage

Browser settings can clear cookies and local storage. This can sign you out, remove preferences, licenses and temporary batches, and require an online load before opening offline. Pro and legacy account purchases can be restored by signing in. Guest Single Export requires your privately saved purchase recovery code and the same original input file.

Logical deletion does not promise physical device erasure. Timers are not guaranteed when the browser is closed.

Tracking

This release includes no third-party analytics, advertising, session replay or chat scripts. Introducing unnecessary technology requires a new assessment and disclosure updates before activation.

Support