Cookie Policy
What we store
Outclass uses a few cookies and similar browser storage. None are used for advertising, analytics or tracking you across other sites.
Essential cookies
- outclass_session: keeps you signed in. Signed and HTTP-only, 30 days.
- outclass_oauth_state: protects sign-in against forgery. 10 minutes.
- outclass_next: remembers the page to return to after sign-in. 10 minutes.
- outclass_admin: admin console session, staff only. 8 hours.
Security and fraud prevention
- outclass_did: a random device ID, also kept in local storage, IndexedDB and Cache Storage so it survives when one is cleared. 2 years.
- outclass_fp: a browser fingerprint hash made in your browser by the open-source FingerprintJS library. 2 years.
These are set only in the workspace and are needed to keep the free trial to one per person, which keeps the service secure and free to try. Our servers store them only as salted hashes, and they're never used for advertising or to follow you elsewhere.
Local storage
The workspace keeps your projects, preferences, theme and a cached exchange rate in local storage (keys starting with figit-) so the app opens quickly. It is sent only to our own servers, when your projects are saved.
Third-party requests
Pages load fonts from Google Fonts, scripts and icons from jsDelivr and Iconify, images from ImageKit, and the workspace loads exchange rates from open.er-api.com and, when you copy a design that uses Tailwind to Figma, a script from the Tailwind CSS CDN (cdn.tailwindcss.com). These services receive your IP address and browser details when your browser fetches from them. See the Subprocessors.
Your choices
Because we only use storage the service needs, there's no cookie banner. You can block or delete cookies in your browser settings; if you block outclass_session you won't be able to sign in. If we ever add analytics or other optional cookies, we'll ask first and add a way to change your choice on this page.