Cookie Policy
Last updated: August 23, 2026
BriefPad uses only essential cookies required for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and session state.
Cookies We Use
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
bp_token |
Authentication session token. Keeps you logged in. | Essential | 7 days |
bp_admin_token |
Admin panel session token (admin users only). | Essential | 8 hours |
Cookie Properties
- HttpOnly: Cannot be accessed by JavaScript (prevents XSS theft).
- Secure: Only sent over HTTPS connections.
- SameSite=Lax: Protects against CSRF attacks.
- Path: Scoped to
/(entire site).
What We Don't Use
- No Google Analytics or tracking pixels.
- No Facebook/Meta pixels.
- No advertising or remarketing cookies.
- No fingerprinting or cross-site tracking.
- No third-party widget cookies.
Local Storage
BriefPad uses the browser's localStorage to store UI preferences (such as sidebar state) and AI agent chat history. This data never leaves your device.
Managing Cookies
You can disable cookies in your browser settings. However, disabling the essential bp_token cookie will prevent you from staying logged in to BriefPad.
Changes to This Policy
We will notify you of any changes to our cookie policy via email or in-app notification.
Contact
Questions about cookies: privacy@briefpad.app