Safe For The Office™
Trust Center

Cookie Policy

What cookies Safe For The Office™ uses, why they are used, and what is explicitly not used.

Cookie Summary
  • One session cookie — used to keep you signed in
  • No advertising cookies
  • No third-party tracking pixels
  • No behavioural advertising systems
  • No analytics cookies (Google Analytics, Mixpanel, etc.)
  • No cross-site tracking

What Is a Cookie?

A cookie is a small piece of data that a website stores in your browser. Cookies are used for many purposes — from keeping you signed in to tracking your behaviour across websites for advertising. Safe For The Office™ uses cookies only for the first purpose: keeping you signed in.

Cookies Used by Safe For The Office™

__sfto_session
Required — Authentication
Purpose
Keeps you signed in to your facilitator or administrator account. Without this cookie, you would need to sign in on every page.
Contents
A signed JSON Web Token (JWT) containing your user ID, email, display name, and role. The token is cryptographically signed — it cannot be forged or modified.
Expiry
8 hours from sign-in. The cookie is cleared when you sign out.
Security flags
HttpOnly (inaccessible to JavaScript), Secure (HTTPS only), SameSite=Strict (not sent on cross-site requests)
Scope
Set for the safefortheoffice.ca domain only. Not shared with any other domain.
Third party?
No — set and read only by Safe For The Office™

What Is Not Used

Safe For The Office™ does not use:

  • Advertising cookies — no cookies are used to serve or target advertisements
  • Third-party tracking pixels — no Facebook Pixel, Google Tag Manager, or similar tracking scripts
  • Behavioural advertising systems — no retargeting, no interest-based advertising
  • Analytics cookies — no Google Analytics, Mixpanel, Amplitude, or similar analytics platforms
  • Cross-site tracking — no cookies that follow you across other websites
  • Persistent identifiers — no device fingerprinting or persistent tracking identifiers

Browser Local Storage

In addition to cookies, Safe For The Office™ may use your browser's local storage for the following purposes:

  • Theme preference — remembers whether you prefer light or dark mode
  • Workshop plan state — preserves your active workshop plan progress between page loads

Local storage data is stored only in your browser and is never transmitted to our servers. You can clear it at any time by clearing your browser's site data.

Participant Cookies

Participants who join a workshop session do not receive a persistent session cookie. Participant state (display name, answers, bingo marks) is held in the server's active memory only and is not stored in a cookie or in the database. When the session ends, all participant state is gone.

Managing Cookies

You can control cookies through your browser settings. Blocking the session cookie will prevent you from signing in to your facilitator or administrator account. It will not affect your ability to join a workshop session as a participant.

Most browsers allow you to view, block, and delete cookies. Refer to your browser's help documentation for instructions.

← PIPEDA Alignment AI Policy →

Last reviewed: October 2026