This notice explains the cookies and browser storage used by Senots and one2sign (the "Services"), provided by DDR Solutions Inc. ("DDR"). It supplements our Privacy Policy.
In short
- Our marketing websites (one2sign.com and senots.com) set no cookies of their own, use no analytics, advertising or tracking technology, and load no third-party fonts. Cloudflare, our host, processes connection data such as IP addresses to deliver and protect the sites. Our sign-up forms use Cloudflare Turnstile, which may use strictly necessary technical data from your browser to tell people from bots (Section 2). Our other web addresses (such as one2sign.ca, onetosign.com and tosign.me) only redirect to one2sign.com and set no cookies.
- The app (where you sign in, and the signing pages) uses only cookies that are strictly necessary for signing in and security, and browser storage that remembers choices you make on your device.
- We use no advertising cookies, analytics cookies, tracking pixels or third-party trackers, and do not share cookie data with advertisers. For this reason, we do not show a cookie banner.
1. Cookies set by the Services
All of these cookies are first-party, HttpOnly (page scripts cannot read them), sent only over HTTPS, and SameSite=Lax.
| Cookie | Purpose | Lasts |
|---|---|---|
senots_auth |
Keeps you signed in after you sign in with an email code, Google or Microsoft | 30 days, or until you sign out |
senots_login_nonce |
Ties an email sign-in code or link to the browser that asked for it, so a link sent to you cannot be used from somewhere else | 10 minutes |
__Host-senots_oauth_state |
Protects Google and Microsoft sign-in against forged requests | 10 minutes |
senots_session |
Keeps you signed in, in configurations that use the older sign-in method | 12 hours |
senots_support |
Used only by DDR support staff during a support session that a company's owner or admin has granted | At most 30 minutes |
2. Cookies set by our hosting provider
Our hosting and security provider, Cloudflare, may set strictly necessary cookies to protect the Services, for example to tell people from bots or to remember that a browser passed a security challenge (such as __cf_bm or cf_clearance). Pages and areas protected by Cloudflare Access, such as DDR's operator console, use the CF_Authorization cookie. These cookies are not used for advertising or analytics.
Cloudflare Turnstile protects our website sign-up forms from bots. It runs small checks in your browser and gives the form a one-time token, which our server verifies with Cloudflare. It may use strictly necessary technical data from your browser to do this. We do not turn on Turnstile's optional pre-clearance feature, which would add the cf_clearance cookie. Turnstile is not used for advertising or analytics.
3. Browser storage (localStorage and sessionStorage)
The app keeps small settings in your browser so that your choices stay the same on this device. This storage stays on your device and is not sent to us with each request.
localStorage (kept until you clear it):
| Key | What it remembers |
|---|---|
senots.theme |
Light, dark or system appearance |
senots.locale |
Your language |
senots.product |
Whether you last used one2sign or the full Senots Suite, so the right layout loads first |
senots-login-next |
The page to return to after you sign in |
senots.weatherAt |
The place you chose for weather (a location rounded to about 10 km), only if you turn weather on |
senots.tempUnit |
°C or °F |
senots.quoteTerm |
Your company's word for quotes (Quote, Proposal or Estimate) |
senots.deals.mode, senots.projects.taskView, crm-dash-scope |
How you like to view opportunities, tasks and the CRM dashboard |
esign.view, esign.group, esign.reportDays |
Your chosen one2sign document view, grouping and report period |
sg-start-hidden:… |
That you closed the one2sign getting-started card |
sessionStorage (cleared when you close the tab):
| Key | What it does |
|---|---|
senots.greeted |
Shows the welcome greeting once per sign-in |
esign-pass:… |
On a signing page, remembers for this visit only that you entered the correct access code |
senots.console.email |
Used only in DDR's operator console |
4. Your choices
You can block or delete cookies and browser storage in your browser settings. If you block the cookies in Section 1, you will not be able to sign in or sign documents. If you clear browser storage, the app forgets your display choices, but nothing else changes.
5. Changes
If we add a cookie or storage item, we will update this notice. We will not add analytics or advertising cookies without first updating this notice and, where the law requires, asking for your consent.
6. Contact
Questions: hello@one2sign.com.