Legal
Cookie Policy
The cookies and similar tools SafetyDocs uses on its site and in the app, what each one does, how long it lasts, and how to change your choices.
Last updated: 2 November 2026
Cookies are small files a site saves in your browser. Browser storage does a similar job. This page lists what SafetyDocs uses, and our Privacy Policy explains how we handle what they collect.
Your choices
On our public site, optional cookies stay off until you choose. Nothing about your visit is sent to analytics, chat or advertising tools until you allow them. You can change your mind at any time in site settings. Essential cookies are always on, because the site doesn't work without them.
You can also block or clear cookies in your browser. If you block essential cookies, you won't be able to sign in.
Essential
| Name | What it does | Lasts |
|---|---|---|
wos-session | Keeps you signed in. Set through WorkOS, which also sets a short-lived cookie while you sign in | Up to 400 days, or until you sign out |
sd-consent | Remembers your cookie choices | 1 year |
sd-locale | Remembers your region and language | 1 year |
sd_guest_* | Lets you back into a job you joined without an account | 30 days |
sd-claim | Holds a claim for old-store templates while you sign in | 1 day |
sd-claim-access | Lets you into the app after you confirm a claim | 1 year |
We also save your theme, and your details for a job you've joined, in your browser's storage. On a shared phone or tablet, use "Not your details? Change" before you sign.
Analytics
Used only if you allow analytics on the public site.
| Tool | What it does | Examples |
|---|---|---|
| PostHog | Measures page views, clicks and video plays | ph_*, up to 1 year |
| Customer.io | Links your visit to our emails with a pseudonymous ID, so what we send next fits | ajs_user_id, ajs_anonymous_id, up to 1 year |
| Mux | Measures how a video played. Mux sets no cookies, and its player loads only when you press play | None |
In the app. The cookie banner doesn't appear here. PostHog records how the product is used, against your account and organisation, unless you turn off product analytics in your account settings. That choice applies to the browser you're using. We send error reports to Sentry.
On job, invitation, claim and unsubscribe links. PostHog doesn't run on these pages, and we remove codes and tokens from any address PostHog does record.
Live chat
Used only if you allow live chat. HubSpot runs the chat, and its script also records your visit. Turning it off removes the chat and its cookies, such as __hstc, hubspotutk, __hssc and messagesUtk, which last up to 6 months.
Advertising
Used only if you allow advertising cookies. The Meta pixel and LinkedIn's Insight tag record the pages you visit, and the Meta pixel also records whether you registered for early access or booked a demo, so we can measure our ads on Facebook, Instagram and LinkedIn. Meta and LinkedIn set their own cookies, such as _fbp, li_sugr and bcookie, which can last up to 2 years, and can link this to your accounts with them. They use this under their own privacy policies.
Global Privacy Control. If your browser sends this signal, we treat it as refusing advertising cookies, and the tags don't load, even if you've allowed them. It doesn't change your choices for analytics or live chat.
Questions
Email privacy@safetydocs.app.