# Cookie & browser storage policy

Version: 2026-11-02
Status: Cookie policy
Operator: Codaform AB, organisation number 559607-6504, Fagermon 315, 705 91 Örebro, Sweden
Contact: info@codaform.se

Authentication cookies, appearance/language preferences and controls for optional storage.

## How we use browser storage

We use cookies and local storage to maintain secure sessions and remember your choices. Necessary authentication and security cookies support the service you request. We do not currently use an analytics or advertising provider on this website.

## First-party cookies and local storage

| Name / storage | Purpose | Duration |
| --- | --- | --- |
| authjs.session-token / __Secure-authjs.session-token (possibly numbered chunks) | Signed-in account session; necessary | Configured session lifetime up to 30 days |
| authjs.csrf-token / __Host-authjs.csrf-token | Authentication request protection; necessary | Session |
| authjs.callback-url / __Secure-authjs.callback-url | Authentication return destination; necessary | Session |
| ls_cookie_preferences | Remember optional-cookie choices | 180 days |
| codaform_lang | Remember the language selected by the visitor | Up to one year |
| codaform_theme (local storage) | Remember light/dark appearance; the script may initialise it from the system preference | Until cleared or replaced; no automatic expiry |

## Payment and anti-abuse services

Protected forms use Cloudflare Turnstile to check for automated abuse. Paddle provides checkout and the customer billing portal. These services process browser and network information for their respective functions; their privacy notices explain their processing.

The table above covers storage set by Codaform. Payment and anti-abuse services can use separate storage within their own flows. Optional analytics or advertising requires consent where applicable. You can use our cookie settings to manage optional categories.

## Choices and withdrawal

Use Cookie settings below or in the footer to reject optional categories or change your preferences. Analytics and marketing controls are available, but neither category currently has a provider connected. Withdrawing consent affects future optional processing and does not affect the lawfulness of earlier processing.

You can also clear cookies and local storage in your browser. Removing authentication cookies signs you out, and blocking necessary storage can prevent account functions. Clearing appearance or language preferences resets those choices.

## References

- [PTS: cookies and consent](https://www.pts.se/internet-och-telefoni/kakor-cookies/)
- [Cloudflare Turnstile privacy information](https://www.cloudflare.com/privacypolicy/)
- [Paddle privacy notice](https://www.paddle.com/legal/privacy)