Legal
Cookie policy
Last updated: 31 October 2026
Cookies are small files a website stores in your browser. We use only essential cookies: the ones needed to sign you in and keep your session secure. We don't use advertising, analytics or tracking cookies, so there is nothing to opt in to.
1. Cookies we use
All are set only when you sign in, can't be read by scripts on the page, and are sent only over secure connections.
| Name | Purpose | Kept for |
|---|---|---|
serverworks_web_access_token | Keeps you signed in to your workspace | Up to 1 hour |
serverworks_web_refresh_token | Renews your session without asking you to sign in again | Up to 30 days |
serverworks_web_oauth_state | Protects sign-in against forged requests | 10 minutes |
serverworks_web_oauth_verifier | Completes sign-in securely (PKCE) | 10 minutes |
serverworks_web_oauth_nonce | Checks the sign-in response belongs to your request | 10 minutes |
When you sign in, SocialWorks (our sign-in service, at auth.socialworks.io) sets its own essential session cookie under its policy.
2. Controlling cookies
You can delete or block cookies in your browser settings. If you block these, you won't be able to sign in; the public pages still work.
3. Changes
If we ever add cookies that aren't essential (for example, analytics), we will ask for your consent first and update this page. See also the privacy policy.