Draft. The highlighted details aren’t filled in yet, and these documents need a lawyer’s review before EscForms takes real customers.
Cookies
EscForms sets cookies only when you sign in: two that keep you signed in, and one that lasts minutes while you sign in with Google or GitHub. There are no analytics, advertising or tracking cookies.
The cookies we use
| Name | Purpose | Type | Lasts |
|---|---|---|---|
escforms_session | Keeps you signed in. Scripts on the page can’t read it, and other websites can’t use it | First-party, sign-in | 30 days after your last visit to the dashboard, or until you sign out. If you untick “Keep me signed in”, until you close the browser |
escforms_browser | Remembers that this browser has confirmed an email code, so it isn’t asked for one again. It’s a random value that identifies nothing outside EscForms | First-party, security | 180 days after your last sign-in on this browser. It stays after you sign out, which is what spares you the code next time. It isn’t set if you untick “Keep me signed in” |
escforms_oauth | Only while you sign in with Google or GitHub: makes sure the sign-in that comes back is the one this browser started. It’s a random value | First-party, security | 10 minutes at most, and it’s deleted as soon as you’re back |
Why there’s no cookie banner
Consent laws such as the EU’s ePrivacy rules exempt cookies that are strictly necessary for a service you’ve asked for. Signing in is exactly that, so we explain these here, and you make the choice where it matters: the “Keep me signed in” box on the sign-in page. Visitors who don’t sign in get no cookies from us at all.
To clear what a browser remembers, use Sign out everywhere else in Settings on another device, change your password, or delete the cookies in that browser.
If we ever add anything optional, such as analytics, we’ll ask you first and update this page before it’s switched on.
Paying with Dodo Payments
When you pay, you leave this site for Dodo Payments’s checkout page. Dodo Payments sets its own cookies there, for fraud prevention and processing payments, under its own cookie policy.
Passkeys
Passkeys aren’t cookies. They’re kept by your device or password manager, and you can remove one in Settings at any time.
Fonts
Our fonts are served from our own site, so loading a page doesn’t contact any other company.
Removing cookies
You can delete cookies in your browser’s settings at any time. This signs you out, and the next sign-in on that browser will ask for an email code.
Questions
Write to privacy@escforms.com.