PaperPlane currently uses only storage needed to provide requested functions or remember a user preference. We do not currently use advertising cookies or website analytics. Therefore no optional cookie is placed before consent. If optional tracking is added, this notice and the consent control will be updated before it is enabled.
Marketing website
| Item | Type | Purpose | Lifetime |
|---|---|---|---|
pp-theme | Local storage | Remembers light/dark appearance | Until removed in browser settings |
The website is usable if local storage is unavailable; the theme then lasts only for the page.
PaperPlane application
| Item | Type | Purpose | Lifetime |
|---|---|---|---|
paperplane.locale | Cookie | Remembers the selected application language | 1 year |
| Keycloak authentication items | Cookies/session storage | Login, security, logout and redirect integrity | Session or the configured login lifetime |
paperplane_share_access | Protected HttpOnly cookie | Remembers verified access to one protected share | Up to 12 hours |
paperplane_signature_access | Protected HttpOnly cookie | Remembers verified access to one signature request | Up to 12 hours |
| Billing and OAuth workflow keys | Session storage | Payment return, idempotency and connector redirect state | Browser-tab session or earlier removal after completion |
| Workspace/referral UI keys | Session storage | Return to the correct workspace and apply a requested referral | Browser-tab session or earlier removal |
Upload tracker (paperplane.upload-tracker.v1:*) | Local storage | Resumes and displays upload progress, filename, size, status and errors | Until entries are cleared by the application or browser storage is removed |
These items are used to deliver login, checkout, upload, sharing, signature, language and security functions expressly requested by the user. The legal basis for related personal-data processing is contract performance and our legitimate interest in secure operation. Terminal-device access is limited to what is necessary for those functions under applicable telecommunications law.
You can remove cookies and site data in browser settings. Removing authentication, workflow or upload data can sign you out, interrupt a checkout/connector return or remove local upload history; it does not delete documents already stored in the PaperPlane service.