Cookies
Which cookies Draft2Cut uses, what they do, and why the notice on the sign-in page asks for no consent.
Last updated 18 September 2026
1.In short
Draft2Cut uses strictly necessary cookies only — the ones without which the application does not work — plus one that remembers your chosen language. There are no profiling cookies, no advertising cookies and no third-party analytics.
For these, the law requires information, not prior consent: that is why the notice on the sign-in page only informs, with a single button to close it. Asking permission for cookies you cannot refuse without giving up the service is a ritual that protects nobody.
2.The cookies, one by one
| Name | What it does |
|---|---|
| next-auth.session-token | Keeps you signed in. It is httpOnly — JavaScript cannot read it — and lasts seven days. Without it you cannot stay logged in. |
| next-auth.csrf-token | Protects forms against requests sent from other sites. Lasts for the browser session. |
| next-auth.callback-url | Remembers where you were heading when you were asked to sign in, so you can be taken back. Lasts for the browser session. |
| activeTenantId | Remembers which organisation you are working in, for people who belong to more than one. It is httpOnly and lasts thirty days. |
| draft2cut-locale | Remembers the language you chose before signing in. Lasts one year. Account holders have this preference on their profile, so it follows them between computers. |
The light or dark theme, and the fact that you closed the cookie notice (the draft2cut-cookie-notice item), do not use a cookie: they stay in the browser's local storage and are never sent to the server. Clearing local storage brings the notice back.
3.How to control them
Every browser lets you inspect and delete a site's cookies. Deleting them signs you out and loses your language and active organisation; blocking them entirely makes signing in impossible, because the session cookie is what keeps you signed in.
4.If this changes
If measurement tools or non-essential cookies are ever introduced, this page will be updated and the notice will become a prior consent request, with separate choices and nothing loaded before you answer, as the law requires. Questions: privacy@draft2cut.com.