Cookie policy

ProposalFast uses cookies that are required to run the product. We do not run third-party advertising pixels on marketing pages.

Essential cookies

• Auth.js session cookies (httpOnly, Secure in production, SameSite=Lax).
• CSRF tokens used during sign-in.
• Active workspace cookie (`pf_org`) so team members stay in the right organization.

Preference banner

Marketing pages show a cookie preference banner. Essential cookies are required to sign in. Choosing “Accept” only stores that preference in localStorage — ProposalFast does not attach advertising pixels today.

Local development

On localhost the Secure flag may be omitted so the session cookie works over HTTP. Production deployments must use HTTPS.