DOXIO

Cookie Policy

Effective from: 28 September 2026

This text was prepared by DOXIO and has not yet been reviewed by an attorney. It reflects how the service actually works today; we will publish any change with a new effective date.

This policy explains which cookies and similar browser storage DOXIO uses. In short: only what is strictly necessary to operate the service securely. We use no advertising, analytics or tracking cookies.

1. What we store in your browser

We set the following cookies. All of them are first-party (set by DOXIO) and none of them tracks you across other websites.

  • Sign-in session (name begins with better-auth.session_token): keeps you signed in to your account. HttpOnly, sent only over HTTPS. Valid for 7 days, extended while you use the service; removed when you sign out.
  • Document access session (doxio_share_session): created after you enter a one-time code for a shared document, so that you can view and sign it without re-entering the code. HttpOnly, sent only over HTTPS. Expires after 45 minutes.
  • Language (NEXT_LOCALE): remembers the language you chose (English or Czech). Set only when you switch away from the default language.
  • Time zone (doxio_tz): remembers your browser's time zone so that dates and times display in your local time. Expires after one year.

In addition, when you dismiss the cookie notice we store your acknowledgement in your browser's local storage (key doxio.cookie-consent) so that the notice is not shown again. This value is never sent to us.

2. Payment page

On the billing page, the payment form is provided by our payment processor, Stripe, and loaded from Stripe's servers. Stripe may set its own cookies (for example __stripe_mid and __stripe_sid) that it uses to prevent fraud and to process the payment securely. These cookies are strictly necessary for the payment and are governed by Stripe's privacy policy. They are set only on the billing page.

3. Why no consent is needed

Under Article 5(3) of the ePrivacy Directive and section 89(3) of the Czech Electronic Communications Act, storage that is strictly necessary to provide a service you have requested does not require consent. Everything listed above falls into that category, which is why our cookie notice only asks you to acknowledge it: there is nothing to opt out of. If we ever introduce non-essential cookies, we will ask for your consent first and update this policy.

4. No analytics or advertising

We do not use advertising cookies, third-party analytics scripts or social-media plug-ins. Our error monitoring runs on our servers only, sends no script to your browser and records no personal data.

5. Managing cookies

You can delete or block cookies in your browser settings. Blocking the sign-in or document access cookie will prevent you from signing in or opening shared documents; deleting the language or time-zone cookie only resets those preferences.