Cookie Policy
Last updated: October 2, 2026
This Cookie Policy explains how ZDottedLine Inc. ("Zdottedline," "we," "us," or "our") uses cookies and similar technologies on the zdottedline.com website and e-signature platform. This policy should be read alongside our Privacy Policy.
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences, maintain your session, and improve your experience.
Cookies We Use
Essential Cookies (Strictly Necessary)
These cookies are required for the platform to function. They cannot be disabled without breaking core functionality. Under the ePrivacy Directive, these cookies do not require consent as they are strictly necessary for the service you requested.
| Cookie | Purpose | Duration |
|---|---|---|
| zdl_access | Short-lived sign-in token that authenticates your requests (HttpOnly, Secure, SameSite=Lax) | 15 minutes |
| zdl_refresh | Keeps you signed in by renewing the sign-in token; revoked when you sign out or change your password (HttpOnly, Secure, SameSite=Lax) | 7 days |
| Cloudflare Turnstile | Bot protection on the sign-up and contact forms, set by Cloudflare (challenges.cloudflare.com) only on those pages | Set by Cloudflare |
Preference and Analytics Cookies
We do not currently set any preference or analytics cookies. If we add analytics in the future, it will load only after you agree through a consent prompt, and your choice will be stored in a zdl_consent cookie for one year. You can change it by clearing that cookie.
Cookies We Do NOT Use
Zdottedline is committed to minimal data collection. We do not use:
- Third-party advertising or retargeting cookies
- Social media tracking pixels (Facebook Pixel, LinkedIn Insight, etc.)
- Cross-site tracking cookies
- Analytics cookies that identify individual users
- Fingerprinting or device-identification technologies beyond what is necessary for signature evidence collection
Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies will prevent you from using the platform's authenticated features (login, document signing, account management).
Instructions for managing cookies in common browsers:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and Site Permissions
Data Retention for Cookie Data
Session data associated with cookies is retained only for the duration specified in the tables above. Sign-in tokens expire after 15 minutes and are renewed automatically while your refresh token is valid; refresh tokens expire after 7 days. Upon expiration or logout, session data is invalidated and removed from our servers. Our data retention practices are governed by our internal Data Retention Policy.
Security of Cookie Data
All authentication cookies are configured with security best practices:
- HttpOnly: Prevents JavaScript access (mitigates XSS attacks)
- Secure: Only transmitted over HTTPS connections
- SameSite=Lax: Restricts cross-site cookie usage to top-level navigations (e.g. payment redirects); blocks the cross-site POST/PUT requests that constitute CSRF
In the event of a security incident affecting session data, our Incident Response Plan governs notification, containment, and remediation procedures. See our GDPR Compliance page for details on our incident response commitments.
Changes to This Policy
We may update this Cookie Policy from time to time. Material changes will be communicated through a notice on the platform.
Contact
Questions about our cookie practices? Contact us at privacy@zdottedline.com.