Legal
Cookie policy
The cookies GarnerDocs sets, and what each one is for.
Last updated
A cookie is a small text file a website asks your browser to keep and send back on later visits. Websites use cookies to remember who you are between pages, to keep forms secure, to measure visits, and sometimes to track you across other sites.
GarnerDocs uses cookies for the first two everywhere. On our public website, and only if you agree, we also use cookies to measure visits. We never use cookies to track you across other sites.
This page covers our website, the GarnerDocs app that firms sign in to, and the private upload links firms send to their clients.
The cookies we set
GarnerDocs sets three cookies on its own domain that are strictly necessary: without them you couldn't sign in, and forms and uploads wouldn't work.
If you accept analytics cookies on our website, Google Analytics sets two more, _ga and _ga_…. They're not necessary, so we only set them with your consent.
If you open the chat on our website, Crisp, the service we use for it, sets its own crisp-client/… cookies to keep your conversation going.
| Cookie | Set by | Purpose | Duration | Strictly necessary |
|---|---|---|---|---|
garnerdocs-session |
GarnerDocs | Keeps you signed in from page to page and carries confirmations such as "Workflow saved". On a client's upload page, it remembers which files were uploaded from this browser, so the client can remove one before it's reviewed. It also lets this website show "Open dashboard" when you're signed in. | 2 hours after your last visit | Yes |
XSRF-TOKEN |
GarnerDocs | Protects forms and uploads against cross-site request forgery: a check that a request really came from a GarnerDocs page and not from another site. | 2 hours after your last visit | Yes |
remember_web_… |
GarnerDocs | Only set if you tick "Keep me signed in" when signing in to a firm account. Keeps you signed in after your browser closes. Signing out removes it. | 400 days | Yes |
_ga |
Google Analytics, on our website only | Only set if you accept analytics cookies on our website. A random ID that lets Google Analytics tell one visitor from another, so we can count visits and see how people use the site. | 2 years | No |
_ga_… |
Google Analytics, on our website only | Only set if you accept analytics cookies on our website. Keeps track of your current visit to the site, so Google Analytics can count pages viewed and time spent in one visit. | 2 years | No |
crisp-client/… |
Crisp, on our website only | Only set if you open the chat on our website. Keeps your conversation with us from page to page and when you come back, so you don't have to start again. | 6 months after your last visit | Yes |
Scroll sideways to see every column on a small screen.
The "Keep me signed in" cookie's name ends in a fixed string of letters and numbers, the same for everyone. The session and "Keep me signed in" cookies can't be read by scripts on the page, and all three are only sent over HTTPS.
Clients who open an upload link get the session and XSRF-TOKEN cookies only. Clients don't have accounts, so they never get the "Keep me signed in" cookie.
Analytics on our website
We use Google Analytics to see how people find and use our public website: which pages they visit, how they got there, and what device they use. This helps us improve the site.
- Only with your consent. Google Analytics doesn't load until you choose "Accept analytics" in the banner. If you reject it, or close the page without choosing, it never loads.
- Only on the website. It never runs in the GarnerDocs app that firms sign in to, or on the upload pages firms send to their clients.
- No advertising. Google's advertising features are switched off, and we don't use the data to show you ads.
- What Google receives. The pages you visit, how you got there, your device and browser, and an approximate location worked out from your IP address. Google Analytics doesn't store IP addresses. Our subprocessors list explains where Google processes it.
- How long it's kept. Google Analytics keeps the details of your visits for 2 months.
You can change your mind at any time with Cookie settings at the bottom of every page of our website. If you reject analytics after accepting it, we delete the Google Analytics cookies from your browser.
Chat on our website
Our public website has a chat button, run by Crisp, so you can ask us questions.
- Cookies only when you open it. Crisp doesn't set its cookies until you open the chat. They keep your conversation from page to page and when you come back, for 6 months after your last visit.
- Only on the website. The chat never runs in the GarnerDocs app that firms sign in to, or on the upload pages firms send to their clients.
- What Crisp receives. The messages you send, the page you're on, your browser and your IP address. Our subprocessors list explains where Crisp processes it.
We don't use advertising, social media or tracking cookies anywhere.
When we ask for consent
Cookie laws don't require consent for storing or reading information on your device when that's strictly necessary to provide a service you've asked for. The rules we rely on are:
- Germany: §25(2) No. 2 of the Telecommunications Digital Services Data Protection Act (TDDDG).
- UK: paragraph 4 of Schedule A1 to the Privacy and Electronic Communications Regulations (PECR).
- Elsewhere in the EU: the same exemption in each country's version of the ePrivacy Directive.
Our three GarnerDocs cookies are strictly necessary, and so are the chat cookies Crisp sets when you open the chat and the browser storage described below, so they don't need your consent. That's why the app and client upload pages don't show a cookie banner.
Analytics cookies aren't strictly necessary, so our website asks first, as the same laws require (in Germany, §25(1) TDDDG). "Accept analytics" and "Reject analytics" are equally easy to choose. If we ever add another cookie or storage that isn't strictly necessary, we'll ask for your consent first and update this page.
Other storage in your browser
When a firm owner or admin closes the reminder to confirm their file retention period on the Overview page, the app remembers that in the browser's session storage until the tab is closed. It isn't a cookie, it's never sent to us, and it holds nothing but the fact that the reminder was closed.
When you accept or reject analytics on our website, your browser's local storage remembers your choice under garnerdocs-consent, with the time you made it, so we don't ask again on every page. It isn't a cookie and it's never sent to us. It stays until you change your choice or clear your browser's data.
Cloudflare
GarnerDocs sits behind Cloudflare, which protects it against attacks. If Cloudflare needs to check that a visit comes from a person rather than a bot, it may set its own security cookie, such as __cf_bm (for 30 minutes) or cf_clearance (after a check you pass). These cookies are strictly necessary to keep GarnerDocs safe, aren't used to track you, and are covered by Cloudflare's cookie policy.
Paying with Stripe
When a firm subscribes or manages its billing, it's taken to pages run by Stripe, our payment provider. Those pages are on Stripe's own website and any cookies there are covered by Stripe's cookie policy.
Controlling cookies
You can block or delete cookies in your browser's settings. If you block GarnerDocs's cookies, you won't be able to sign in to the app or upload documents through a client link. Deleting them signs you out.
Changes and questions
If we change the cookies we set, we'll update this page and the date above. If you have a question about cookies, contact us at [email protected]. Our Privacy Policy explains what we collect and why.
GarnerDocs is provided by Waseem S. M. Abusenjr, trading as GarnerDocs, Alte Landstr. 85, 51373 Leverkusen, Germany. Our legal notice has our full details.