Legal

Cookie Policy

Version 1.4. Last updated 8 September 2026.

This policy explains what Decimio stores in your browser. It is short, because Decimio stores very little.

The short version

We set three cookies and one browser storage entry. One of them keeps you signed in. The other three remember how you like the interface arranged. We run no analytics, no advertising and no tracking of any kind, we set no third-party cookie, and nothing here follows you to another website. Every file this page loads comes from us, so no other company sees your visit at all. That is the entire list, and it is checked against the code rather than copied from a template.

What a cookie is here

A cookie is a small piece of text a website asks your browser to keep and to send back on the next request. Local storage is similar, except that it stays in the browser and is never sent to us at all. Both are covered by this policy because both put something on your device.

Everything we store

The complete list of what Decimio writes to your browser
Name	Kind	What it holds	How long
decimio_session	Cookie, strictly necessary	A signed reference to your signed-in session on our server. No name, no email address, nothing readable.	14 days, or until you sign out
decimio-nav	Cookie, preference	Whether you collapsed the left navigation. The value is the word collapsed or the word expanded.	1 year
decimio-columns	Cookie, preference	The order you put the columns of your list table in. The value is the column headings, which on your own columns are the words your own file used.	1 year
decimio-theme	Local storage, preference	Whether you chose the light or the dark theme. The value is the word light or the word dark.	Until you clear your browser storage

The session cookie

This is the one that keeps you signed in, and the service cannot work without it. It is set when you follow a sign-in link and it is deleted when you sign out. It is signed, so it cannot be altered; it is marked HttpOnly, so no script in your browser can read it; it is marked Secure whenever the site is served over HTTPS; and it is restricted to our own site with SameSite Lax, so another site cannot cause your browser to send it. The session itself lives on our server, which means we can end it immediately rather than waiting for the cookie to expire.

The three preferences

Each one is written only when you click a control in order to change the interface: collapsing the navigation, moving a column of your list table, or switching between the light and dark theme. None of them is written when a page merely loads, and none of them holds a default we chose for you. Nothing is stored until you ask for it, and what is stored is the setting you asked for and nothing else. None of the three identifies you, and the theme preference is never sent to us at all, because local storage stays in your browser.

Two of them are cookies rather than local storage for one reason: the page is built on our server, so reading the preference there means a collapsed navigation is already narrow, and your columns are already in your order, when the page arrives, instead of visibly jumping once it has. It also means both work with JavaScript switched off.

The column order holds the headings of your own table. Where you have uploaded a file with columns of your own, those headings are the words your file used, so that part of the value is your text rather than ours. It is still a display setting: it says where a column sits, never what is in it.

What we do not do

No analytics. There is no analytics script on this site. We do not measure your visit, your scroll depth or your journey through the pages.
No advertising or tracking. No advertising cookie, no pixel, no conversion tag, no tag manager, no remarketing list, no fingerprinting, and nothing sold or passed to an advertising network. We do not track you across other websites.
No third-party cookie. Nothing on this site sets a cookie belonging to another company.
No social media buttons or embeds that would load a tracker with them.
No request to anyone else. Not a hosted font, not a map, not a video, not a script on somebody else's server. Everything the page needs is served from decimio.com.

If that changes we will update this page before the change goes live, and if the change is one that needs your consent we will ask for it rather than assume it.

On browser signals such as Global Privacy Control. We do not sell or share anything we collect from visitors to this website, so a browser signal has nothing here to switch off. That is not the whole answer, because Decimio does sell business contact data about people generally, and those people are usually not the ones reading this page. If you are one of them, the opt-out that matters is described in the Privacy Policy, and you can exercise it by writing to privacy@decimio.com.

These pages do not talk to anyone but us

Every file your browser fetches to draw this page comes from decimio.com: the markup, the stylesheet, the icons and the two typefaces. There is no request to any other company, so no other company learns your IP address, the page you are reading or the time you read it.

This is worth stating plainly because most websites cannot. Any web request discloses your IP address to whoever answers it, which is why a hosted font, a map, an embedded video or an analytics script is a disclosure even when it sets no cookie. Until recently our own pages loaded their two typefaces from Google's font service and this section said so. We have moved those font files onto our own servers, which is the only way to make the disclosure go away rather than merely explain it.

A sentence like this rots the moment somebody adds an embed, so it is checked rather than promised: an automated test reads every page template and the stylesheet on every build and fails if a single address pointing anywhere but here appears in them. If we ever have a reason to load something from elsewhere, this section changes first.

European law requires your consent before a website stores things on your device, unless what it stores is strictly necessary for a service you asked for. We do not show you a banner because, on the list above, we do not believe we need one.

The session cookie is what signing in means. Without it you would be signed out on the next page.
The three preferences are written only because you clicked a control in order to change the interface, never when a page simply loads, and they hold nothing but the setting you chose.

We would rather explain that reasoning than interrupt every reader with a banner that asks permission for nothing. If we ever add anything that needs consent, you will be asked properly, the refusal will be as easy as the acceptance, and nothing will be set before you answer.

How to remove them yourself

Signing out deletes the session cookie. Every browser also lets you view and delete cookies and site data for a single site, usually under a settings section called privacy, cookies or site data, and clearing site data for decimio.com removes all three items above.

You can block cookies for this site entirely. If you do, you will not be able to sign in, because the session cookie is what a signed-in session is. If you block local storage or use a private window, the theme toggle still works and simply forgets your choice when you close the tab.

Who to write to

Sodasoft, 30 N Gould St, Sheridan, WY 82801, United States. Privacy and data-subject requests: privacy@decimio.com. Everything else: legal@decimio.com.

Our other policies: Privacy Policy, Terms and Conditions, Cookie Policy, Refund Policy.