Draft: not yet reviewed by counsel

This is a working draft. It has not been approved and is not final, and it should not be relied on as the agreement between you and us. It is waiting for review.

Cookie Notice

The cookies and browser storage the Service uses, and what your browser asks other companies for.

Version 2026-09-21Effective 21 September 2026

In short

We use only what is needed to sign you in and to make the Service work as you expect. There are no advertising or analytics cookies, and nothing here tracks you across other sites. Because of that, we do not show a cookie banner asking you to opt in.

A cookie is a small file a website asks your browser to keep. We also use your browser’s storage, which does a similar job but is not sent to us with every request. This page lists both, so you can see exactly what is there.

Cookies

Both cookies are set by us, cannot be read by scripts on the page, and are strictly necessary: without them you cannot stay signed in.

NameWhat it is forHow long it lasts
bff_access_tokenKeeps you signed in. It is what proves to our servers that a request comes from you.Short-lived (about 15 minutes) and renewed while you stay signed in
bff_refresh_tokenLets your session carry on after the access cookie expires, so you are not asked to sign in every few minutes.7 days, or until you sign out

Browser storage

The Service also keeps some information in your browser’s own storage. It stays on your device.

WhatWhat it is forWhat it can containHow long
Who you are signed in as (auth-storage)Lets the interface show your name and role and decide which pages to offer, without asking the server on every page.Your user id, email address, name, role and organisation id. Not your password, and not the session itself (that is the cookies above).Until you sign out or clear your browser data
Your last workspace (c8.lastWorkspace)Remembers the address of the workspace you used last, so signing in can take you back to it.A workspace address.Until you sign out or clear your browser data
Page recovery (c8.session-recovery)Reloads a page once when you return to it with the back button, so it does not show stale content.A single marker.Until you close the tab
Interface preferences (dm-column-visibility-v2, *-globalFilters, flow-*-globalFilters, ai-promo-dismissed:*, ai-assistant-fab-position, imt.transformWorkspace.editorPercent, c8-theme, c8-theme-profile-sync, versionCompareSettings:*, versionCompareExportConversions:*, pipeline-run-log-cleared:*)Remembers which table columns you show, the filters you set on tables and flows, how you line up columns, keys and decimal places when comparing two versions of a table and whether its export applies conversion lists, which prompts you have dismissed, where you moved the AI Assistant button to, where you last cleared the log of a pipeline run, how you have sized the query editor, and whether you chose a light, dark or system appearance (kept in step across your open tabs).Column names, filter settings and the names of tables and flows you use. Filter values you typed are included.Until you clear your browser data
Work in progress (migration-upload-resume:*, migration-download-resume:*, record-show:*, record-show-cache:*, record-edit:*, imt.transformWorkspace.history.*)Lets a long upload or download resume after you refresh the page, speeds up opening a record you were just working on, and keeps a short history of the queries you ran in a transform so you can reopen one.Job identifiers and progress, a copy of the record you were viewing or editing, and the text of recent queries with any error they returned, all of which can include values from your data.Until the job finishes, you close the tab, or you clear your browser data

Other companies your browser contacts

To draw the interface, your browser asks the companies below for files directly. That is not a cookie, and we send them nothing, but they see the request, which includes your IP address.

AddressCompanyWhat for
fonts.googleapis.comGoogleServes the stylesheet for the icon font used across the interface.
fonts.gstatic.comGoogleServes the icon font files themselves.

Managing them

You can delete cookies and browser storage in your browser’s settings. Deleting the cookies signs you out; deleting the storage resets your preferences and any resumable upload. Blocking the two cookies means you will not be able to sign in.

If this changes

If we ever add a cookie that is not strictly necessary, we will update this page first and ask for your consent before it is set.