SignalOS sets three cookies, all of them first-party, and none of them for advertising or analytics. There are no third-party scripts on this site, so nothing else can set one.
signalos_session
Keeps you signed in. Without it you would have to sign in on every page.
Set when you sign in, removed when you sign out. Not readable by JavaScript, restricted to same-site requests, and sent only over HTTPS in production.
signalos-theme
Remembers whether you chose light, dark or system appearance.
Set when you change the theme. It is read on the server so the first paint is already in your theme rather than flashing the wrong one.
signalos_sso_oidc_attempt
Holds a single in-progress single sign-on attempt so the response from your identity provider can be matched to the request that started it.
Short-lived, and removed as soon as the sign-in completes. Only set if your organization uses SSO.
These stay on your device, are never sent to us, and only affect how the interface looks for you.
You can clear or block these in your browser at any time. Blocking the session cookie means you cannot stay signed in; blocking the other two costs you only the preference they remember.
Whether any jurisdiction we sell into requires a consent mechanism for strictly necessary cookies, and how this page should be worded if analytics are ever added. If that changes, this page changes with it.