Cookie Policy
Plain English Summary
We use essential cookies for sign-in and optional cookies for analytics (if enabled). You can manage cookies using your browser settings.
1. What Are Cookies
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) by your web browser when you visit a website. Cookies allow the website to recognize your device and remember certain information about your visit, such as your preferences or whether you are signed in.
Cookies may be first-party (set by the website you are visiting) or third-party (set by a domain other than the one you are visiting). They may also be session cookies (deleted when you close your browser) or persistent cookies (remain on your device until they expire or you delete them).
SingleSign primarily uses first-party cookies to operate the Service securely and efficiently.
2. Cookie Categories
We classify the cookies we use into the following categories:
Essential cookies (required)
These cookies are strictly necessary for the Service to function. They enable core features such as authentication, session management, and security protections. Without these cookies, the Service cannot operate properly.
You cannot disable essential cookies without losing access to SingleSign functionality.
Functional cookies (preferences)
These cookies remember your preferences and settings to provide a more personalized experience. For example, functional cookies may store your preferred theme (light or dark mode) or language setting.
Functional cookies enhance your experience but are not required for the Service to work. If you disable them, some preference-related features may not persist between visits.
Analytics cookies (optional, if enabled)
Analytics cookies help us understand how the Service is used by collecting aggregated and anonymized usage data, such as which pages are visited most frequently and how users navigate the Service.
Analytics cookies are only used if we enable an analytics feature and you opt in. They are not currently active by default.
3. Cookies We Use
The following table describes the specific cookies used by SingleSign:
| Cookie Name | Purpose | Duration | Category |
|---|---|---|---|
ss_session | Identifies your authenticated session with SingleSign. Required for maintaining your sign-in state across page loads. | Session (expires when browser is closed) | Essential |
ss_auth_token | A secure, HTTP-only token used to authenticate API requests on your behalf. | 24 hours (refreshed on activity) | Essential |
ss_csrf | A cross-site request forgery (CSRF) protection token. Validates that form submissions and state-changing requests originate from SingleSign. | Session | Essential |
ss_device_id | A unique device identifier used for security purposes, including detecting unusual sign-in activity and supporting device management features. | 1 year | Essential |
ss_theme | Stores your preferred color theme (light, dark, or system). | 1 year | Functional |
ss_locale | Stores your preferred language or locale setting. | 1 year | Functional |
ss_consent | Records your cookie consent preferences. | 1 year | Essential |
ss_analytics | Collects anonymized usage data (page views, navigation patterns) to help us improve the Service. Only set if analytics are enabled and you have opted in. | 90 days | Analytics |
Notes:
- All essential and functional cookies are first-party cookies set by SingleSign.
- Authentication cookies (
ss_auth_token) use theSecure,HttpOnly, andSameSite=Strictattributes for maximum security. - We do not use third-party advertising cookies or tracking pixels.
4. Managing Cookies
You have control over the cookies stored on your device:
Browser settings
Most web browsers allow you to view, manage, and delete cookies through their settings. You can typically find cookie controls under "Privacy" or "Security" settings. Here are links to cookie management instructions for common browsers:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Privacy, search, and services > Cookies and site permissions
Clearing cookies
You can clear all cookies at any time through your browser settings. Note that clearing cookies will sign you out of SingleSign and any connected applications.
Impact of blocking cookies
If you block or delete essential cookies:
- You will not be able to sign in to SingleSign.
- Authentication sessions will not persist between page loads.
- CSRF protection will not function, which may prevent form submissions.
If you block functional cookies:
- Your theme, language, and other preferences will not be saved between visits.
If you block analytics cookies:
- There is no impact on functionality. Analytics cookies are entirely optional.
5. Updates
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons.
- We will update the "Last updated" date at the top of this policy when changes are made.
- For material changes (such as introducing new cookie categories or third-party cookies), we will provide notice through the Service or via email.
- We encourage you to review this Cookie Policy periodically.
If you have questions about our use of cookies, please contact us at privacy@singlesign.com.