SignExact Cookie Policy
Last updated: November 2, 2026
1. Overview & Privacy-First Policy
SignExact is engineered with a strict privacy-first architecture. We do not use third-party behavioral advertising cookies, retargeting pixels, cross-site trackers, or data-broker scripts on SignExact.com.
2. Cookies We Utilize
SignExact exclusively utilizes strictly necessary first-party cookies required for secure authentication, session persistence, and tenant isolation:
| Cookie Name | Type | Lifespan | Purpose |
|---|---|---|---|
| signexact_session | Essential / First-Party | 7 Days | Stores an HMAC-SHA256 signed session token for authenticated dashboard access. Configured with HttpOnly, Secure, and SameSite=Lax flags. |
3. Guest Signer Experience
Guest signers accessing a document via their 256-bit cryptographically secure token (/sign/:token) do not require persistent browser cookies to execute an agreement. Token authorization is verified ephemerally per request.
4. Managing Cookies in Your Browser
You can configure your browser to block or alert you about cookies. However, blocking the strictly necessary signexact_session cookie will prevent you from signing in to your dashboard.