Cookie policy
Most visitors get no cookie at all. One remembers a language you pick; four more exist only around signing in. Here is the complete list.
The complete list
NEXT_LOCALE — set only if you choose a language, so the site stays in it. If you never switch, it is never set.
__Host-hp-at and __Host-hp-rt — set only if you sign in, to keep you signed in.
__Host-hp-in — set together with them. It holds only the value 1, no token: it tells the pages that a session exists, so they do not have to ask our server on every page.
__Host-hp-pkce — exists for at most ten minutes while you sign in with Google, Apple, Microsoft or GitHub, to finish that sign-in safely, and then expires.
If you never create an account, none of the last four is ever set. That is the whole list — there is no sixth cookie.
What is stored on this site
Separate from cookies, the site keeps a short history in this browser’s local storage so you can pick up where you left off. It holds the tool id, the time, and how many files you processed.
It never holds file names or file contents. It stays in this browser’s storage and is never sent to us. Clearing your browser data removes it, and so does clearing site data for this domain. Safari, including every browser on iPhone and iPad, also deletes it after seven days without a visit unless the site has been added to the Home Screen.
If you have used a tool offline, the tool code itself is also kept in this browser’s storage. That is what makes offline use possible. If you use a tool while offline, the anonymous step count described below waits in this browser's storage and is sent when the connection comes back — the same daily total, with no identifier.
If you send a signature request, this browser also keeps that request's management link, so you can open the request again from your account page. The link is the key to the encrypted document. Removing it here only removes the shortcut; the copy in your email keeps working. If you turn on notifications for a request, the browser keeps its own notification subscription; turn it off on the request page or in the browser's site settings.
If you rate the site or a tool, this browser keeps a random ID so the rating counts once. It is created only when you rate and is sent only with your rating — the privacy policy says what is kept.
Things you choose to keep also stay in this browser: settings you ask a tool to remember, saved signatures, and the details you store for filling in forms. The Settings page lists everything this browser holds for the site and removes any of it.
No third-party trackers
There is no advertising pixel and nothing that follows you to other sites.
To count visits we use Cloudflare Web Analytics. It sets no cookie and stores nothing on your device. For each page view it records the page, the site you came from, your browser type, your country and how fast the page loaded — without identifying you, and without following you anywhere else. It is how we learn which pages people actually use.
We also count a few steps anonymously — for example how many times a tool was started or the pricing page was opened. These are plain daily totals with no cookie and no identifier, and nothing is counted when your browser sends Global Privacy Control.
The sign-in form loads one third-party widget: Cloudflare Turnstile, which stops automated sign-up attempts. It sets no cookie here and stores nothing. It appears only on the sign-in page, and only if you go there.
You can open a file straight from Dropbox, Google Drive or OneDrive. When you do, your browser fetches that one file from the provider directly — it is never routed through our servers, and nothing else is requested. Google Drive asks you to sign in first, and we request only the narrowest permission it offers: access to the file you picked, and nothing else in your Drive. Saving a result works the same way in reverse: the file goes from your browser straight to your Google Drive, OneDrive or Dropbox, and you see the account and folder before it is sent. OneDrive and Dropbox only let DocuGrip write to its own folder; in Google Drive it can only reach the folder you save to.
This is enforced, not just promised: the site content security policy lists every outside address the page is allowed to reach, and that list is short enough to print here — Cloudflare Turnstile on the sign-in page, Cloudflare Web Analytics for the anonymous visit count, and Dropbox, Google Drive or OneDrive when you pick a file from one of them or save a result to it. A tracker could not phone home even if one were added by mistake, because its address would not be on the list.