[ Legal ](https://sendnda.com/legal) Cookie Policy ============= The cookies Send NDA sets, and why none of them needs your consent. Steddle Group B.V. is in oprichting (in formation). 02 For everyone ------------ Document 4 of 5 This policy is part of our [Privacy Policy](https://sendnda.com/legal/privacy) and explains which cookies [sendnda.com](https://sendnda.com) stores on your device and why. What a cookie is ---------------- A cookie is a small piece of data a website stores on your device. It lets the site recognise your browser on your next request, for example to keep you signed in or to protect a form against forgery. Cookies set by the site you are visiting are first-party cookies; cookies set by other companies are third-party cookies and can be used to follow you across sites. The cookies we set ------------------ Send NDA sets only cookies the site needs to work, so there is no consent banner and they cannot be switched off while you use it. The session cookie remembers you between requests while you create, preview or sign an agreement; the remember cookie keeps you signed in between visits. | Cookie | What for | How long | |---|---|---| | `sendnda_session` | Your session: what you do on the site between two requests, and that you are signed in | 120 minutes after your last request | | `XSRF-TOKEN` | Protects forms against forged requests | 120 minutes after your last request | | `remember_web_` followed by a code | Keeps you signed in after your session has expired | 400 days after you sign in | | `foundry_sidebar` | Remembers which groups of the sidebar you folded; your browser writes it itself | A year | | `__cf_bm` | Cloudflare, which stands in front of the site, tells bots from visitors with it | 30 minutes | Each of these cookies is needed to run the site, and the law asks no consent for that (article 11.7a(3) of the Dutch Telecommunicatiewet). Send NDA sets no advertising or tracking cookies. With the session Send NDA keeps your IP address, your browser (`user_agent`) and the moment of your last request, and for a signed-in visitor who that was; that row goes with the session. Send NDA counts visits with Visitors. On the pages where Send NDA loads it, a script from `cdn.visitors.now` sends Visitors, from your browser, the page's address and the referring page, how long the page stays open, how fast it loaded with your connection's type and your device's memory, and the address of a link you follow off the site; as every browser does, it sends your IP address and your browser with each. The script itself comes from Cloudflare's network, which sees your IP address and browser when it hands it over, as it does for the whole site. Visitors keeps no cookie: its script sets a test cookie to learn the site's domain and deletes it at once. Before counting, the script reads one switch in your browser's storage, which turns the counting off, and writes nothing else there. Visitors does not follow you across sites. It reads your city and country off your IP address and then discards the address, unless that address sends so many requests in a short time that Visitors blocks it: then it keeps the address until the block expires. It recognises you within one day by a hash of IP address, browser and a key that changes daily, so tomorrow you are another visitor. It stores a record of each visit at Hetzner in Germany and keeps it for as long as Steddle's account with it exists, the performance measurements for a year; a record links to your other visits of the same day only. It sends no event when your browser has Global Privacy Control or Do Not Track on. Visitors states this in its [data policy](https://visitors.now/data), and its script shows it. The law asks no consent for a measurement like this, which has no or only a slight effect on your privacy (article 11.7a(3)(b) of the Dutch Telecommunicatiewet). No tracking cookies ------------------- We do not use advertising, targeting or social media cookies. Visitors' script does not run on the sign-in pages or on an agreement's own page, where you sign. Controlling cookies ------------------- You can block or delete cookies in your browser settings. If you block our essential cookies you will not be able to sign in or complete an agreement. Changes ------- If we add cookies that are not essential, we will update this page and ask for your consent before setting them. Contact ------- Questions about cookies: [hello@sendnda.com](mailto:hello@sendnda.com). This version is in force from 20 October 2026. Until Steddle Group B.V. is incorporated, it applies to Steddle Group B.V. in oprichting and whoever acts on its behalf. [ Every document ](https://sendnda.com/legal)Questions: [hello@sendnda.com](mailto:hello@sendnda.com)