The cookies and browser storage Understify uses, and why
Last updated: 13 October 2026
Cookies are small text files a website stores in your browser. Local and session storage are similar browser features. We only use them where they are strictly necessary to provide the service you asked for, such as keeping you signed in or remembering a setting you chose. That is why we do not ask for consent with a cookie banner.
| Name | Type | Purpose | When it is set | How long |
|---|---|---|---|---|
| sb-<project>-auth-token (may be split into .0, .1) | Cookie | Keeps you signed in. Set by our sign-in provider, Supabase, on our own domain. | When you sign in | Until you sign out, or up to 400 days |
| sb-<project>-auth-token-code-verifier | Cookie | Proves that a Google sign-in or password-reset link was started in this browser. | When you start Google sign-in or a password reset | Until the sign-in finishes |
| csrf-token | Cookie | Security: protects some actions against requests forged by other websites. | When you use a page that changes your data | 1 hour |
| active_org_id | Cookie | Remembers which of your organisations you are working in. | After you sign in | Until you close the browser |
| pending_checkout_plan, pending_checkout_billing | Cookie | Remember the paid plan you chose while you confirm your email address. | When you sign up with a paid plan selected | 1 hour |
| pending_invite_token | Cookie | Remembers the team invitation you are accepting while you sign in or sign up. | When you open an invitation link | 1 hour |
| us_integration_oauth_nonce | Cookie | Security: ties a Google Drive or OneDrive connection to the browser that started it. | When you connect an integration | 10 minutes |
| ux_theme | Cookie | Remembers the Light, Dark or System appearance you chose. | Only when you choose an appearance | 1 year |
| sidebar:sections, sidebar:workspace | Local storage | Remember which sidebar sections you opened and the workspace you picked. | When you use the sidebar in the app | Until you sign out or clear it |
| onboarding_completed, onboarding_completed_at, onboarding_version | Local storage | Stop the welcome tour from showing again once you have finished it. | When you finish or skip the welcome tour | Until you sign out or clear it |
| understify.viewer.jk | Local storage | Remembers whether you turned the document viewer's keyboard shortcuts off. | When you change that setting | Until you sign out or clear it |
| chunk-error-reloaded | Session storage | Stops the page reloading in a loop after a failed app update. | Only after part of the app fails to load | Until you close the tab |
All of these are set by Understify on our own website. Signing out clears the sign-in cookies and the local and session storage listed above.
In the signed-in app
Sign-in and live updates. Your browser connects to our Supabase project, which receives your IP address.
On the sign-up form, when the bot check is shown
Tells people from automated sign-ups. Cloudflare receives your IP address and browser details and describes these signals as strictly necessary for detecting bots.
When you pay or manage billing
You are sent to Stripe's own payment pages. Any cookies there are Stripe's, on Stripe's website. We do not load Stripe's script on our pages.
When you sign in with Google or connect Google Drive
You are sent to Google's own sign-in page.
If something breaks, an error report is sent to Sentry through our own website. It sets no cookies and stores nothing on your device, and we remove your IP address, cookies, email addresses and the query part of web addresses before it is sent.
You can block or delete cookies and site data in your browser settings. If you block the cookies above, you will not be able to sign in or use the app, because they are needed for it to work. If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this page.