Legal
Cookie policy
Last updated 2026-10-30
This policy lists every cookie and browser storage entry Notemark sets on its own pages, what each one does and how long it stays. Pages you load inside a canvas can set their own cookies; those belong to that site.
Strictly necessary
These keep you signed in, let share links work and protect sign-in flows. Notemark does not work without them, so they cannot be switched off.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| sb-* | Notemark | Keeps you signed in to your account. | Up to 400 days, renewed while you use the app |
| guest_token_* | Notemark | Lets a reviewer who opened a share link keep reviewing that canvas. | 72 hours |
| nm_guest | Notemark | Remembers a reviewer so they are not asked for their name again on the same canvas. | 180 days |
| __proxy_ctx_* | Notemark | Ties the files a canvas page loads back to that canvas so the page renders. | Until you close the browser |
| oauth_state, figma_oauth_nonce, figma_oauth_verifier | Notemark | Protects the handshake when you connect an integration or a Figma account. | 10 minutes |
| __passkey_challenge | Notemark | Checks a passkey sign-in or a new passkey you add. | 5 minutes |
| nm_impersonating, nm_impersonator | Notemark | Set only while a Notemark admin is signed in as you to help with a support request, so the session can be ended and audited. | Up to 12 hours |
| notemark_pending_plan, notemark_pending_canvas_url, onboarding_state | Notemark | Carries the plan or page address you picked through signup and onboarding, in local storage. | Until onboarding finishes |
Analytics and diagnostics
PostHog and Sentry tell us which features are used and what broke. Both can record your session, as described in our privacy policy. They load on every visit today; we do not yet show a consent prompt.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| ph_*_posthog | PostHog | Counts visits and feature use and links a session recording to your visit. | 1 year |
| sentryReplaySession | Sentry | Links an error report to the recording of the session it happened in. | Until you close the tab |
| _ga, _ga_* | Google (Tag Manager) | Measures visits to our pages. Set only when we turn on Google Tag Manager. | Up to 2 years |
Preferences
These stay on your device and only change how the app looks and opens.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| annotate-theme, workspace-storage, dashboard-storage, team-storage, archive-storage, notemark-sidebar-recents-open, notemark-canvas-view, canvas_help_hint_seen, notemark_note_seen_*, notemark:tools:email-annotation:v1 | Notemark | Remembers your theme, sidebar and canvas view settings, which tips you have seen, and email tool drafts, in local storage. | Until you clear site data |
Your choices
You can block or delete cookies in your browser settings. Blocking the strictly necessary ones signs you out and stops share links from working. Blocking PostHog, Sentry or Google does not affect how Notemark works.
Changes
We update this list when we add or remove a cookie, and the date at the top changes with it. Questions go to support@notemark.app.