Cookie policy
Draft of 14 October 2026
Draft for information. This policy is not yet final. The final version will be published here before SiteCabin launches, and may change before then.
Questions to admin@sitecabinapp.co.uk.
A cookie is a small file a website stores in your browser. SiteCabin uses only the cookies it needs to work. We do not use advertising, tracking or analytics cookies, so we do not ask for your consent to cookies.
Our website
Our website, sitecabinapp.co.uk, sets no cookies of its own, and neither does the click-through demo on it. The demo keeps nothing in your browser's storage: it shows fixed screens with made-up data, and nothing you do in it is saved or sent to us.
The cookies we use
| Cookie | Where | What it does | How long |
|---|---|---|---|
Session (__Secure-authjs.session-token) | The app | Keeps you signed in after you sign in with Microsoft | Until you sign out, or 90 days after you last used the app |
Security check (__Host-authjs.csrf-token) | The app | Stops other websites making requests in your name | Until you close your browser |
Sign-in return address (__Secure-authjs.callback-url) | The app | Brings you back to the page you were on after signing in | Until you close your browser |
Starting your free month (sitecabin_start and sitecabin_start_codes) | The app | Remembers your firm's name, any code you typed and your agreement to the terms while you sign in with Microsoft | 30 minutes |
Setting up (sitecabin_sharepoint_setup, sitecabin_mailbox_connect) | The app | Used only by an admin while connecting SharePoint or the office mailbox, so Microsoft's answer comes back to the right place | 20 minutes and 15 minutes |
Set-up link (sitecabin_claim) | The app | Used only when a firm's first admin opens a set-up link we have sent them | 30 minutes |
Cloudflare security (__cf_bm), only if Cloudflare decides to check for bots | The website and the app | Tells real visitors from automated traffic | 30 minutes |
The app is at app.sitecabinapp.co.uk. The cookies marked as setting up or starting are only set during those steps, and are deleted when they finish or run out.
Drafts kept on your phone
So that work isn't lost without signal, the app keeps forms and timesheets you haven't sent yet in your browser's own storage on that phone or computer. They stay there until they are sent or you delete them, and you can clear them in your browser settings. This is part of the app working for you, not tracking.
Microsoft and Stripe
When you sign in, you do so on Microsoft's own pages, and when you add a card, on Stripe's own secure page. Those pages set their own cookies, under Microsoft's and Stripe's own cookie policies.
Blocking cookies
You can block cookies in your browser settings. If you block the app's cookies, you will not be able to sign in.
Changes
If we ever add other cookies, we will update this page first and ask for your consent where the law requires it.
See also our privacy notice and terms of website use.