Cookie Policy
Effective October 11, 2026. This policy explains the cookies and similar browser storage that 0-Doubt uses. Read it with our Privacy Policy.
1. What we use
Cookies are small text files that a website stores in your browser. Browser storage (localStorage and sessionStorage) works in a similar way, but is not sent to our servers with each request. We use both only for the reasons listed below: to keep you signed in and secure, to complete sign-in with a provider, to apply the free-preview limit on questionnaires, and to remember a few display preferences.
We do not use advertising cookies, cross-site tracking cookies, or third-party analytics. The site's content security policy allows scripts only from our own server, so third-party tracking scripts cannot load.
2. Cookies we set
All of these cookies are first-party cookies set by 0-Doubt. Each one is marked HttpOnly, so scripts running in the page cannot read it, and SameSite=Lax, so browsers only send it on same-site requests and top-level navigations. The sign-in and admin cookies are also marked Secure whenever the request arrives over HTTPS, so browsers never send them over an unencrypted connection.
| Name | Purpose | Lifetime | Strictly necessary? |
|---|---|---|---|
sh_session | Keeps you signed in. It holds a signed token that identifies your account. Set at sign-in, sign-up, a magic-link sign-in or a provider sign-in, and cleared when you sign out or close your account. | 7 days from sign-in, or sooner if you sign out. | Yes. Without it you cannot stay signed in. |
sh_impersonate | Set only while a platform administrator is signed in as another user to investigate a problem. It tells the site which account the administrator is viewing. It is cleared when the session ends, and every sign-in clears any leftover value. | 1 hour, at most. | Yes, for those sessions. It is never set on an ordinary visit. |
sh_oauth_state | Protects sign-in with Google, Microsoft or LinkedIn against forged requests. Holds a random value that must match the one the provider returns. | 10 minutes, and cleared as soon as sign-in completes. | Yes, for provider sign-in. |
sh_oauth_next | Remembers the page you were on, so you return there after signing in with a provider. | 10 minutes, and cleared as soon as sign-in completes. | Yes, for provider sign-in. Only set when there is a page to return to. |
sh_oauth_intent | Records whether a provider sign-in should sign you in or link the provider to your existing account. | 10 minutes, and cleared as soon as sign-in completes. | Yes, for provider sign-in. |
sh_oauth_account_type | Carries the account type you picked on the sign-up page through a provider sign-up. | 10 minutes, and cleared as soon as sign-in completes. | Yes, for provider sign-up. |
sh_qtrial | Remembers which questionnaire categories you have opened while signed out, so the free-preview limit is applied consistently. It holds a short list of category page addresses. | 180 days. | No. It supports the free-preview limit, which you can avoid by creating an account. |
Cloudflare. Traffic to this site passes through Cloudflare, which protects and delivers it. Cloudflare may set its own security cookies on requests that pass through its network. Those cookies are governed by Cloudflare's own documentation, and we do not read them.
3. Browser storage we use
The following items are kept in your browser's storage rather than in cookies. They stay on the device you used and are not sent to our servers unless a row says otherwise. You can clear them in your browser settings.
| Key | Storage | Purpose | Lifetime |
|---|---|---|---|
sh_theme | localStorage | Your light or dark display preference. | Until you change or clear it. |
sh_recent_searches | localStorage | Your most recent search terms, so you can select them again from the search box. | Until you clear it. |
zero-doubt.workspace.v1 | localStorage | An evaluation (criteria, weights, shortlist and scores) you build without signing in. It stays in your browser unless you choose to save it. Saving sends a copy to our server, which gives you a private link. Saved evaluations that nobody opens for 90 days are deleted. | Until you clear it. Saved copies: see the Privacy Policy. |
0doubt:compareSelection | sessionStorage | The vendors you have selected for side-by-side comparison in the current tab. | Until the tab is closed. |
0doubt.directory.pageSize | localStorage | How many rows you chose to see per page in the vendor directory. | Until you clear it. |
odoubt.onboarding.checklist | localStorage | Which steps of the getting-started checklist you have completed. | Until you clear it. |
sh_session_changed | localStorage | A timestamp only. When you sign in or out in one tab, other open tabs read it so they update too. It contains no personal information. | Overwritten on each sign-in or sign-out. |
4. Why we do not ask for consent through a banner
Every cookie and storage item on this page is either needed to run the Service or sign you in securely, or it remembers a preference you set yourself. We do not set advertising or tracking cookies, so we do not show a cookie banner. If that changes, we will ask for your consent before setting any cookie that needs it and update this page.
5. Managing cookies
You can delete cookies and browser storage at any time in your browser settings. Blocking sh_sessionwill stop you from signing in, and blocking the sign-in cookies will stop provider sign-in from completing. Most of the other items only affect convenience, such as your theme or the vendors you selected for comparison. Your browser help pages explain how to do this for each browser.
6. Changes and contact
We will update this page when we add, remove or change a cookie or storage item, and we will change the effective date at the top of it. Questions about cookies: [email protected].