Cookie policy

In short

• Cookies that keep you signed in and make signing in secure. The site needs them, and they're set only when you use an account.
• Google Analytics on public pages, only if you choose Accept in the cookie banner.
• No advertising cookies, and nothing that follows you to other websites.

Cookies the site needs

These can't be switched off in PayDocs, because signing in and your workspace don't work without them. They're only read by paydocs.co.

• sb-…-auth-token — set by our sign-in provider (Supabase) when you sign in, to keep you signed in. Renewed while you use PayDocs, for up to 400 days, and removed when you sign out.
• sb-…-auth-token-code-verifier — a one-time code that completes signing in by email link or with Google securely. Kept only until that sign-in finishes.
• __Host-paydocs-recovery — set while you reset a forgotten password, for 10 minutes.
• paydocs_document_search — remembers the search you typed in your workspace's document list until you close the browser.

Stored in your browser

Some choices are kept in your browser's storage rather than in cookies. They're never sent to us with your requests.

• pd-analytics-consent (local storage) — remembers whether you chose Accept or Decline in the cookie banner, until you clear your browser's data.
• paydocs.pendingOrder and paydocs.checkoutFrom (session storage) — while you pay, remember which order to show when you come back from checkout. Cleared when you close the tab.

What you type into a generator stays in the open page. It isn't saved in your browser or sent to us unless you sign in and save it.

Analytics, only with your consent

On the public pages of paydocs.co we use Google Analytics to understand how visitors find and use the site. It loads only after you choose Accept in the cookie banner, and then sets the _ga and _ga_<ID> cookies, which Google Analytics keeps for up to two years.

If you decline, or haven't chosen yet, Google Analytics isn't loaded, no analytics cookies are set and nothing is sent to Google. It never runs in the workspace, sign-in or checkout, and page addresses are sent without reference numbers. Advertising features stay off either way.

Other services

Payments happen on Stripe's checkout page, under Stripe's own cookie policy. The security check on some forms (Cloudflare Turnstile) runs in a frame from Cloudflare, under Cloudflare's privacy policy; it isn't used for advertising.

Changing your choice

Use Cookie settings at the bottom of any public page to accept or decline analytics at any time. You can also delete cookies and site data in your browser's settings; if you delete the sign-in cookies, you'll need to sign in again.

Questions

Email support@paydocs.co. Our privacy notice explains what we collect, why, and your rights. This policy takes effect on 5 October 2026.