Cookie policy

1.The short version

Remote Desk sets two cookies in the app, and both exist only to sign you in and keep you signed in. It does not use advertising cookies, and this website does not set any cookies at all.

This page explains each cookie, the other browser storage the app uses for your preferences, and how to control them. For what we do with personal data more broadly, see the privacy policy.

2.Cookies the app sets

session: set when you sign in, so the server knows which account each request comes from. It lasts 7 days, is removed when you sign out, and can be cancelled from the server at any time, for example when an administrator signs a session out or disables an account. It is marked httpOnly, so scripts on the page cannot read it, and SameSite=Lax, so it is not sent with cross-site form posts. In production it is also marked Secure, so it only travels over HTTPS.

td (trusted device): set only if your account uses email two-factor sign-in and you choose to trust the browser you are on. While it is valid, that browser is not asked for a code when you sign in with your password. It lasts 30 days, and unlike the session cookie it is kept when you sign out, because trusting a device is a separate decision from being signed in. It is cleared when you change or reset your password, and you can revoke trusted devices from Settings. It has the same httpOnly, SameSite=Lax and Secure protections, and on its own it signs nobody in.

Neither cookie holds your name, your email address or anything readable. Each holds a random token that the server looks up.

3.Browser storage for your preferences

The app also keeps small amounts of data in your browser's local storage (and, briefly, session storage). This is not sent to us with your requests and is not used to follow you around other websites. It remembers how you like things: light or dark theme, which office view you last used, panel and sidebar layouts, the last page you had open, unsent chat drafts, notification preferences, and audio and camera settings such as per-person volume and noise suppression.

This storage stays on your device until you clear it or Remote Desk replaces it. The app works without it, but you would be asked to set these preferences again.

4.This website

This marketing website does not set cookies. Its only browser storage is one local-storage entry that remembers your choice of dark, light or system theme.

It does not load analytics, advertising or social-media tracking scripts. If we add analytics later, we will describe it here before it goes live, and ask for consent where the law requires it.

If you use the contact form, what you type is sent to us so we can reply. See the privacy policy for how that is handled.

5.Third-party cookies

We do not place advertising, analytics or profiling cookies from third parties in the app. Audio and video between participants use real-time connections to our media server, which does not use cookies.

Links in Remote Desk, such as to a document you share or a site mentioned in chat, take you to other websites with their own cookie practices that we do not control.

6.Your choices

You can delete or block cookies and site data in your browser settings. If you block the session cookie you will not be able to stay signed in, and without the trusted-device cookie you will be asked for a two-factor code every time you sign in.

Because the two cookies are needed to provide the sign-in you ask for, we do not show a cookie banner for them.

7.Contact

Questions about cookies: hello@thehivez.com.