Cookie Policy
What pdfscore (pdfscore.com) stores on your device, and why.
The short version
We use strictly-necessary cookies only — the ones that sign you in and keep that sign-in secure. We do notuse advertising cookies, cross-site tracking cookies, or third-party marketing pixels, and we don't sell or share your browsing data.
Because nothing we set is optional, there is no consent toggle to configure: essential cookies are required for the site to work at all. If that ever changes, this page will change with it and you'll be asked before any non-essential cookie is set.
Cookies we set
| Name | Purpose | Lifetime | Category |
|---|---|---|---|
| __Secure-authjs.session-token | Keeps you signed in after you authenticate with Google. Without it you would be signed out on every page load. | Session / until sign-out | Strictly necessary |
| __Host-authjs.csrf-token | Security. Protects sign-in and account actions against cross-site request forgery. | Session | Strictly necessary |
| __Secure-authjs.callback-url | Remembers the page you were on so you land back there after signing in. | Session | Strictly necessary |
All three are HttpOnly, Secure, and SameSite=Lax: they can't be read by scripts, are only sent over HTTPS, and aren't sent from other sites.
Third parties
Cloudflare Turnstile — the anti-abuse check shown on the invite-redemption and report-a-document pages. Turnstile runs in its own frame and may set cookies on challenges.cloudflare.com to tell humans from bots. It is a security control, not tracking, and it only loads on those two pages.
Stripe— payments. If you open checkout or the billing portal, Stripe sets its own cookies on Stripe's domain to process the payment and prevent fraud.
Analytics — we use Vercel Analytics, which is cookieless: it records aggregate page views without setting a cookie or building a profile of you.
Things we store that aren't cookies
Some preferences live in your browser's local storage rather than a cookie — for example the editor's dark-mode setting, your chosen read-aloud voice, and whether you've dismissed the cookie notice. This data never leaves your device and is not sent to us. Clearing your browser's site data removes it.
Documents you open in the editor are processed in your browser; the editor does not upload your file to us just to view or edit it.
Managing cookies
You can clear or block cookies in your browser settings. Blocking the cookies above will prevent you from signing in, since they are what a signed-in session is made of. Everything on the site that works signed-out will keep working.
Questions
Email support@pdfscore.com. See also our Privacy Policy.