Legal
Cookie Policy
This policy describes cookies and similar storage (localStorage and sessionStorage) on showdoclive.com. It should be read with the Privacy Policy. UK PECR requires consent for cookies that are not strictly necessary. We ask before setting optional ones, store your choice, and let you change it.
1. What cookies are
Cookies are small text files stored on your device. We also use browser storage for the same kinds of job. First-party cookies are set by showdoclive.com and, if you connect Grok Bot, by our connector at mcp.showdoclive.com. We do not currently set third-party advertising cookies.
2. How we ask
On the first visit we show a banner with Reject non-essential, Customize, and Accept all. Rejecting leaves only strictly necessary cookies. Customize lets you switch categories on or off. We store that choice (and the time and method) in a first-party cookie and in localStorage for up to 6 months, or until you change it. If we change the consent version, we will ask again.
3. Categories
- Strictly necessary — required to provide a service you asked for (sign-in, security, share-link unlock, remembering this choice). These do not need consent.
- Preferences — accent colour and sidebar. Off until you allow them. Using the sun/moon control stores light or dark on this device.
- Analytics — not used today. The switch is off unless you turn it on, so we cannot add a measurement script later without a choice on file.
- Marketing — not used today. Same as analytics: stays off unless you opt in.
4. Cookies we set
| Name | Duration | Purpose | Category |
|---|---|---|---|
sdl_consent |
6 months | Stores your cookie choices, timestamp, and consent version. | Necessary |
refreshToken |
Up to 14 days idle, 30 days absolute | HttpOnly refresh token so you stay signed in. Path limited to /api/auth. |
Necessary |
authToken |
About 32 minutes | Short-lived access token for API calls after you sign in. | Necessary |
_id, email, name, emailValidated |
14 days | Signed-in profile hints for the app shell. Set only after you log in. | Necessary |
lpd_share_* |
12 hours | HttpOnly flag that a password-protected short share link is unlocked in this browser. | Necessary |
gbk_session (on mcp.showdoclive.com) |
8 hours | HttpOnly session for your Grok Bot page (action switches, feedback, disconnect). Set only if you open that page. | Necessary |
gbk_b_* (on mcp.showdoclive.com) |
15 minutes | HttpOnly cookie that ties a Grok Bot sign-in to this browser, so nobody else can finish it. Deleted when sign-in completes. | Necessary |
5. Similar storage
| Name | Where | Purpose | Category |
|---|---|---|---|
sdl-cookie-consent |
localStorage | Copy of your cookie choices so the banner can stay hidden. | Necessary |
lpd-theme, lpd-palette |
localStorage | Light or dark after you use the theme control. Accent is written only if Preferences is on. | Preferences |
sdl-sidebar-collapsed |
localStorage | Whether the ShowDoc list is collapsed. Written only if Preferences is on. | Preferences |
authAccessExpiresAt |
sessionStorage | When the access token expires, so the app can refresh quietly. | Necessary |
showdoclive_invite |
sessionStorage | Contributor invite token while you register or sign in. | Necessary |
6. What we do not set today
We do not use Google Analytics, advertising pixels, social trackers, or cross-site marketing cookies. Fonts are hosted on this site so your browser does not call Google Fonts. Stripe cookies may be set by Stripe when you enter Checkout — that happens on Stripe’s domain under their policies after you start a payment.
7. Change or withdraw
- Use on any page (also in the footer, and in Settings if you are signed in).
- Rejecting Preferences deletes theme and sidebar storage we set for that purpose.
- You can also clear cookies in your browser. That signs you out and will show the banner again.
8. Contact
info@showdoclive.com. Complaints: Information Commissioner’s Office.