1. What cookies are
Cookies are small text files a website stores in your browser so it can remember things between pages, such as the fact that you are signed in. Similar technologies, like your browser's local storage, work in much the same way. UK law (the Privacy and Electronic Communications Regulations) lets a website use these without asking for consent only when they are strictly necessary to provide a service you have asked for. Those are the only kind we use.
2. The cookies we use
| Name | Purpose | Duration |
|---|---|---|
sorted-session |
Keeps your session together as you move between pages: whether you are signed in, two-factor checks, and messages shown after a form is submitted. Also used on shops' help centres, returns forms and chat widgets so those forms work securely. | 2 hours after your last activity |
XSRF-TOKEN |
A security token that protects you against cross-site request forgery, so that forms can only be submitted from our own pages. | 2 hours after your last activity |
remember_web_… |
Keeps you signed in to the support panel on this device, so you aren't asked for your password every visit. It is removed when you sign out. | Up to 400 days, or until you sign out |
All of these are first-party cookies, set by us on our own domain. They are marked secure and HTTP-only where possible, and none of them is used to track you across other websites.
3. Local storage in the chat widget
When a shop adds our chat widget to its website, the widget stores a few items in your browser's local storage, on our domain: a random conversation ID, and the name and email address you type in before chatting. This lets the conversation carry on if you move between pages, and saves you typing your details again. It is strictly necessary for the chat you have chosen to start, is not shared with anyone else, and you can clear it at any time through your browser's settings.
4. What we don't use
- No analytics cookies (such as Google Analytics) and no session-recording tools.
- No advertising, retargeting or social media cookies or pixels.
- No third-party scripts that set cookies: our fonts are hosted on our own servers.
If we ever wanted to use a cookie that isn't strictly necessary, we would ask for your consent first, and update this policy.
5. Controlling cookies
You can block or delete cookies in your browser's settings. If you block the cookies above, you won't be able to sign in to the panel, and forms such as the returns form and chat widget won't work. Guidance for common browsers is available from their help pages, or at ico.org.uk.
6. More information
Our Privacy Policy explains how we handle personal data generally, and your rights.
Questions about this document? Email hello@sortedinbox.app and a person will reply.