Cookie Policy
Last updated: August 20, 2026
This is the honest, short version, because the list is honestly short. O2A2 Sign uses one essential cookie to keep signed-in users signed in, one browser storage entry to remember your theme, and nothing else — no analytics cookies, no advertising trackers, no third-party pixels. That is why you see no cookie banner here: there is nothing optional to consent to.
1. What we set
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
o2a2_session | Essential cookie (HttpOnly) | Keeps signed-in users signed in. HttpOnly means scripts in the page cannot read it, which protects it from theft. | 14 days |
| Theme preference | localStorage (not a cookie) | Remembers your light/dark choice on your own device. Never sent to our servers. | Until you clear it |
2. Payment pages
When subscription billing is enabled, payments are handled by Square, and Square’s payment components set their own cookies on those pages for fraud prevention and to make the payment work. Those cookies are governed by Square’s own cookie and privacy notices, not ours; card data goes to Square and never touches our servers (see the Privacy Policy).
3. What we do not do
Today the Service sets no analytics cookies, no advertising or retargeting cookies, and no third-party trackers of any kind, on any page — including the signing pages your counterparties visit. If that ever changes, we will update this page first and, where the law requires consent, ask for it before setting anything.
For the same reason, “Do Not Track” and Global Privacy Control signals from your browser change nothing here — not because we ignore them, but because there is no tracking for them to switch off.
4. Clearing cookies
You can delete the session cookie and the theme entry at any time through your browser’s settings (usually under “Privacy” or “Site data” — look for this site’s domain). Deleting the session cookie simply signs you out; deleting the theme entry returns you to your system’s light/dark preference. Blocking the essential cookie entirely will prevent signing in, because there would be no way to keep your session. Signers opening a signature request do not need to sign in and do not receive the session cookie for that; the emailed link itself identifies their session.
5. Changes
If we add, remove, or change a cookie, we will revise the table above and the “Last updated” date. Material changes — anything beyond the essential and preference entries listed here — will also be announced to account holders. Questions: e-sign@freedocusignature.com.