Cookie policy

1. What cookies are

Cookies are small text files that a website stores in your browser. They let the site remember information between pages or visits, for example that you are signed in. Similar technologies, such as local storage, store information in your browser in a similar way. In this policy, "cookies" includes these technologies unless we say otherwise.

2. Cookies we use

We currently use only strictly necessary cookies. The site cannot work properly without them, so they do not require your consent. The cookies are:

• firmlane.session_token (on our secure site: __Secure-firmlane.session_token): keeps you signed in. Lasts up to 7 days and is renewed while you use the site.
• firmlane.two_factor: holds your place while you enter a two-factor code. Lasts 10 minutes.
• fl_draft: keeps your unfinished formation draft before you sign in. Lasts up to 30 days.
• firmy.sid: keeps your conversation with Firmy, our AI assistant, together. Lasts up to 3 hours.
• fl_support_guest: lets you reopen a support chat you started without an account. Lasts up to 90 days.

We also store one small item in your browser's local storage, fl.viewer, so the site header can show your dashboard link when you are signed in. It holds only your first initial and is removed when you sign out. Cloudflare, which protects our website, may set security cookies such as __cf_bm or cf_clearance to block automated abuse.

2.1 Sign-in session cookie

• Purpose: keeps you signed in to your Firmlane account as you move between pages, and lets us confirm that requests come from you. It is set by our authentication system (Better Auth).
• When it is set: when you sign in.
• How long it lasts: until you sign out or your session expires. You can also review and end your active sessions in your account settings.

2.2 Formation draft cookie

• Purpose: keeps your place in an unfinished formation draft if you start the formation wizard before signing in. It contains an anonymous identifier, not your answers.
• When it is set: when you start a formation draft without being signed in.
• How long it lasts: a short period. When you sign in or create an account, your draft moves to your account.

2.3 Security cookies

• Purpose: help protect sign-in and sensitive actions, for example while you complete two-factor authentication, and help us prevent abuse of our forms.
• When they are set: when you take an action that needs this protection.
• How long they last: usually for a short period or until you close your browser.

3. Card payments and Stripe

When you pay by card, Stripe may set cookies necessary for fraud prevention. Stripe sets and controls these cookies, and Stripe's own cookie and privacy policies apply to them.

4. Local storage

We may use your browser's local storage to remember small interface preferences on your device. This information stays in your browser, and we do not use it to track you.

5. What we do not use

We do not use advertising cookies, analytics cookies or third-party tracking cookies at this time. We do not use cookies to build a profile of you or to show you ads on other websites.

6. If this changes

If we decide to introduce any non-essential cookies in future, such as analytics cookies, we will update this policy and ask for your consent before we set them. You will be able to change your choice at any time.

7. Managing cookies

You can block or delete cookies in your browser settings. If you block the strictly necessary cookies described above, you will not be able to sign in, and the formation wizard will not be able to save an unfinished draft before you sign in.

8. Changes to this policy

We may update this policy, for example if the cookies we use change. We will change the "Last updated" date at the top of this page.

9. Contact

Questions about cookies? Email [email protected] (opens in a new tab) or use our contact page.

Operator: Firmlane, 47 W 13th St, New York, NY 10011