Cookies and browser storage

We use only what the site needs to work. There are no advertising or tracking cookies.

Cookies

• pal_sid The signed-in session. One per site; never readable by scripts. Kept: About 30 days.
• pal_sso_state Holds the one-time check value while a Pal domain signs you in through the hub. Kept: Minutes.
• pal_entra_state Holds the check values while you sign in through Microsoft Entra. Kept: Minutes.
• pal_company_sso_state The same, for company single sign-on. Kept: Minutes.
• pal_attr Remembers which campaign or referral link brought you here, so a sign-up can be credited. Kept: 30 days.
• pal_2fa Holds the short wait between your password and your two-step code. Kept: 5 minutes.
• pal_trust Marks a browser you chose to trust after a two-step code, so it skips the code. Kept: 30 days.
• pal_invite Holds a signup code you entered while invite-only signup is on. Kept: 1 hour.

Kept in your browser, never sent to us

• pal-theme (localStorage) Whether you chose light or night mode.
• draft:<site>:<chat> (localStorage) A message you started typing, so it is still there if you leave. Never sent anywhere until you send it.
• recent-search (localStorage) Your last five message searches, offered as suggestions.
• scroll:<chat> (sessionStorage) Where you had scrolled to in a chat, until you close the tab.