This Cookie Policy describes how Nubesti LLC uses cookies, local storage, and similar browser technologies on insigner.co and app.insigner.co.
The public marketing site is designed to work without non-essential analytics or advertising cookies at launch. The application uses essential authentication cookies and functional browser storage.
1. Scope
A cookie is a small text record a website stores in a browser. Local storage is a browser feature that can retain preferences on a device. Session storage is similar but usually lasts only for the current browser tab or session.
This Policy covers first-party technologies set by inSigner and third-party technologies that may be used when you choose features such as Google sign-in or PayPal checkout. It does not cover cookies on unrelated websites linked from inSigner.
2. Current use
insigner.co
The static marketing website does not currently set non-essential analytics, personalization, or advertising cookies. Fonts and interface icons are packaged with the site rather than loaded from Google Fonts. Local storage remembers when you dismiss the informational cookie notice.
app.insigner.co
The application uses a secure authentication session cookie, temporary authentication cookies where needed, a language preference cookie, and local storage for interface preferences. Essential cookies support sign-in, account security, and access to protected areas.
We do not use cookies to sell personal data or run cross-site behavioral advertising.
3. Cookies and browser storage
| Name or category | Technology | Typical duration | Purpose |
|---|---|---|---|
| insigner_cookie_notice | Local storage | Until cleared or the notice version changes | Remembers that the informational cookie notice was dismissed on insigner.co |
| authjs session token | Essential, HTTP-only cookie | Session or configured session period | Maintains the authenticated account session on app.insigner.co |
| Auth.js security and callback values | Essential temporary cookies | Short-lived | Supports CSRF protection, OAuth state, callback routing, and PKCE when applicable |
| insigner_locale | Functional cookie | Up to 1 year | Remembers the selected application language |
| theme | Local storage | Until cleared | Remembers light or dark appearance on the device |
| nav-collapsed | Local storage | Until cleared | Remembers collapsed dashboard navigation sections |
| admin-nav-collapsed | Local storage | Until cleared | Remembers administrator navigation preferences for authorized administrators |
Cookie names can include a secure prefix in production and may change when authentication libraries or security settings are updated. We will update this table when our material use changes.
4. Third-party services
Third parties may set or read their own cookies only when their service is loaded or selected:
- Google: If Google OAuth is enabled and you choose “Continue with Google,” Google may use cookies to authenticate your account and complete the sign-in flow.
- PayPal: When you open or complete PayPal checkout, PayPal may use cookies for payment, fraud prevention, authentication, and transaction processing.
- Cloudflare: Cloudflare may use strictly necessary security or challenge technologies to protect the website or application from abusive traffic.
These providers control their own cookies under their privacy and cookie notices. A provider can change its cookies independently of inSigner.
5. Your choices
You can manage these technologies in several ways:
- Use browser settings to view, block, or delete cookies for insigner.co and app.insigner.co.
- Clear local storage through browser site-data or developer settings.
- Choose email-and-password sign-in instead of Google OAuth when that option is available.
- Manage third-party cookie choices directly with Google, PayPal, or your browser.
Blocking essential cookies will prevent sign-in and protected application features from working. Clearing functional storage resets the notice, language, theme, and navigation preferences but does not delete your inSigner account or documents.
6. Consent for non-essential technologies
Strictly necessary cookies do not require consent where they are essential to provide a service you request. Where applicable law requires consent before using non-essential cookies, we will request that consent before setting them.
Because the public marketing site does not currently use non-essential analytics or advertising cookies, its cookie notice is informational rather than a request to consent to tracking. If we introduce non-essential technologies, we will add appropriate accept, reject, and preference controls before deployment where required.
7. Changes and contact
We may update this Policy when authentication, browser storage, providers, or legal requirements change. The current version and date will remain available on this page.
Questions about cookies or browser storage may be sent to hi@insigner.co. See our Privacy Policy for broader information about personal data.