Last updated: March 24, 2026 · Effective: March 24, 2026
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide security. CaseFlow Operations uses cookies and similar technologies to operate securely and deliver a consistent experience.
These cookies are essential for the Platform to function. The Platform cannot operate without them and they cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token | Maintains your authenticated session | Session / 30 days |
| next-auth.csrf-token | Prevents cross-site request forgery attacks | Session |
| next-auth.callback-url | Remembers where to redirect after sign-in | Session |
| __Secure-next-auth.* | Secure variants of session cookies (HTTPS only) | Session / 30 days |
These are stored in your browser's localStorage (not cookies) to remember your preferences within a session.
| Key | Purpose | Duration |
|---|---|---|
| caseflow_staff_onboarded | Remembers if onboarding tour has been completed (staff) | Persistent |
| caseflow_client_onboarded | Remembers if onboarding tour has been completed (client) | Persistent |
The Platform uses Vercel Analytics to collect anonymized, aggregated performance and usage data. No personally identifiable information is collected. These analytics help us improve platform performance and reliability.
Third-party services integrated with the Platform may set their own cookies. These include:
If you install the Participant Portal as a Progressive Web App (PWA), the Platform stores cached page data in your browser's Cache Storage to enable offline access. This data includes page HTML, static assets, and previously loaded data. It is stored locally on your device and is not transmitted to any third party. You can clear this data through your browser settings.
You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from signing in and using the Platform. Browser-specific cookie management instructions:
By using CaseFlow Operations, you consent to the placement of strictly necessary cookies as described in this policy. These cannot be opted out of as they are required for the Platform to function securely. For functional and analytics data, you may clear your localStorage and browser cache at any time through your browser settings.
We may update this Cookie Policy from time to time. The "Last updated" date at the top of this page reflects when the policy was last revised. Continued use of the Platform after changes take effect constitutes acceptance.
For questions about our use of cookies: privacy@sdtoolsinc.org