1. Summary
Greenfile uses a small number of strictly-necessary cookies to keep you signed in and on the correct workspace. We do not use cookies for analytics, advertising, retargeting, or any third-party tracking.
We do measure aggregate use of the website with a cookieless analytics tool that stores nothing on your device, described in Section 4.
Because every cookie we set is strictly necessary for the Service to function, we do not show a cookie banner, you have not been asked to consent to anything beyond what is required to deliver the Service you signed up for.
2. The cookies we set
Authentication session cookies
Set by Supabase Auth (our identity provider) when you sign in. They store an encrypted session token so you don't have to enter your password on every page load. Lifetime: typically 1 hour for the access token, 60 days for the refresh token. Names start with sb-.
Organisation-selection cookie (gf_current_org)
Stores the UUID of the workspace you are currently viewing, so the server knows which org to scope your queries to on every page load. Lifetime: 30 days. Cleared when you sign out or change workspaces.
CSRF / framework cookies
Next.js sets short-lived cookies for cross-site request forgery protection on form submissions. They contain no personal data and expire at the end of the request.
3. Cookies we do NOT set
- Analytics cookies, none. Our analytics (Section 4) is cookieless, and we use no Google Analytics, Plausible, Mixpanel, PostHog, Hotjar, or any other cookie-based analytics tool, on either the marketing site or the application.
- Advertising, no advertising or retargeting cookies. We do not advertise.
- Social, no Facebook Pixel, no LinkedIn Insight, no Twitter conversion tracking.
- A/B testing, no experimentation framework cookies.
4. Cookieless analytics
We use Vercel Web Analytics, provided by our hosting provider, to count page views and a small number of product events, such as the free calculator being used. It sets no cookies and writes nothing to your browser's local or session storage. Visitors are counted using a hash derived from the incoming request, which is discarded after 24 hours, and we see only aggregated statistics. Nothing it records identifies you or follows you to other websites.
What is recorded, and how long it is kept, is set out in our Privacy Policy (§ 3.5 and § 7). If you would prefer not to be counted, a content blocker that blocks analytics scripts will stop it loading; the Service works normally without it.
5. How to clear cookies
You can clear Greenfile cookies at any time through your browser's site-settings interface. Doing so will sign you out and reset your workspace selection, the Service will otherwise be unaffected.
If your browser's Do Not Track signal is enabled, we continue to set strictly-necessary cookies (we have to, for authentication) and do not set anything else (we don't have anything else to set).
6. Changes
If we ever introduce a non-necessary cookie, or anything else stored on your device for analytics or marketing, this page will be updated, the home page will show a cookie banner, and you will be asked to opt in before any such cookie is set. The “Last updated” date at the top of this page reflects the most recent revision.
7. Contact
Questions about cookies? hello@greenfile.co.