Cookie Policy

Overview

99b.in is built on a privacy-first architecture. The majority of our tools execute entirely inside your browser using WebAssembly — no files are uploaded to our servers and no document content is transmitted over the network. This policy explains the limited set of cookies and browser storage mechanisms we use to operate the site.

What We Use and Why

1. Authentication Session Cookie (Firebase Auth)

When you sign in to 99b.in, Firebase Authentication stores a session token in a secure, HTTP-only cookie or in browser local storage (depending on the persistence setting you choose). This token is used solely to identify your authenticated session so the application can display your credit balance and protect access to AI agent features. It is not used for advertising or cross-site tracking.

• Cookie name: Firebase Auth ID token (managed by the Firebase SDK)
• Duration: Session-based; expires when you sign out or after the token refresh period (typically 1 hour for the ID token; refresh tokens persist until revoked)
• Purpose: Authentication only
• Third party: Google Firebase (processor, not controller)

2. Theme Preference (Local Storage)

We store your light or dark theme preference in browser localStorage using the keytheme (managed by the next-themes library). This is not a cookie and is not transmitted to our servers. It exists solely to restore your display preference between sessions.

• Storage key: theme
• Duration: Persists until you clear browser storage
• Purpose: UI preference only

3. Analytics (Google Analytics / Firebase Analytics)

We use Firebase Analytics (powered by Google Analytics) to understand aggregate site usage — pages visited, tool usage frequency, and performance metrics. Analytics data is anonymized and does not include the content of any files you process. Analytics is only initialized when the page loads in a browser environment.

• Cookies set: _ga, _ga_* (Google Analytics measurement cookies)
• Duration: _ga expires after 2 years; _ga_* expires after 2 years
• Purpose: Aggregate, anonymized usage statistics
• Third party: Google LLC
• Opt-out: You can opt out using the Google Analytics Opt-out Browser Add-on.

What We Do Not Use

• We do not use advertising cookies or participate in ad networks.
• We do not use third-party tracking pixels or social media retargeting cookies.
• We do not sell or share cookie data with data brokers.
• We do not use fingerprinting techniques to track you across sites.

File Processing and Privacy

All core document tools (PDF merge, split, organize; spreadsheet to delimited text) execute locally in your browser. Files are loaded into device RAM only, processed in a Web Worker, and purged immediately when the operation completes or when the tab is closed. No file content ever reaches our servers.

AI agent operations (Contract Extraction, Bank Statement to Ledger, Regulatory Compliance Auditor) involve transmitting document content to cloud-based language model infrastructure for processing. These operations are opt-in, credit-based, and clearly labeled as cloud operations throughout the interface.

Your Rights and Controls

• Clear cookies: You can clear all cookies and local storage through your browser settings at any time. This will sign you out and reset your theme preference.
• Block cookies: You can configure your browser to block third-party cookies. Core document tools will continue to work without any cookies. Sign-in functionality requires the Firebase Auth session cookie.
• Analytics opt-out: Install the Google Analytics Opt-out Add-on or use browser privacy mode to prevent Analytics cookies from being set.
• Data deletion: To delete your account and associated data, contact us at the address below. Processing will occur within 30 days.

Applicable Law

This policy applies to users globally. For users in the European Economic Area, our use of analytics cookies constitutes processing under the General Data Protection Regulation (GDPR), Article 6(1)(f) (legitimate interests in understanding product usage). For users in India, we operate in accordance with the Information Technology Act, 2000 and applicable rules under the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Changes to This Policy

We may update this policy as our practices change or as required by law. Material changes will be indicated by an updated date at the top of this page. Continued use of the site after the updated date constitutes acceptance of the revised policy.

Contact

For questions about this Cookie Policy or to exercise your data rights, contact us via the reachout form on our website or write to: support@99b.in