Last updated: 7 October 2026
Cookies are small text files a website stores on your device. Similar technologies, such as your browser’s local storage, session storage and the app’s offline cache, work in the same way. The UK Privacy and Electronic Communications Regulations (PECR) cover all of them, so this policy does too.
Skypost only uses storage that is strictly necessary to provide the service you ask for, or that remembers a choice you have made. We do not use advertising, analytics, social media or cross-site tracking cookies.
| Name | Purpose | Duration |
|---|---|---|
| skypost_user | Keeps you signed in to your account | 7 days, or until you sign out |
| skypost_folder_[id] | Lets you open a folder after entering its access words, without re-entering them on every request | 1 hour |
| skypost_guest | Only set if you create a folder without an account. A random ID that lets this browser list and delete the folders it created (My folders). Moved into your account and removed when you sign in | 90 days |
| skypost_admin | Signs in Skypost staff to the admin area (staff only) | 24 hours |
All of these are first-party, secure and HTTP-only, so scripts on the page cannot read them.
| Name | Purpose | Duration |
|---|---|---|
| theme | Remembers whether you chose the light or dark theme | Until you clear it |
| skypost_pwa_visits, skypost_pwa_install_dismissed_at, skypost_pwa_installed | Decides when to offer the “install app” prompt, and stops it reappearing after you dismiss it | Until you clear it |
| skypost_trial_banner_dismissed | Hides the trial banner after you close it | Until you close the tab |
| Drag-and-drop handoff | Briefly holds file details when you drop files onto the window, so they open on the send page | Until you close the tab |
| Offline cache (service worker) | Stores the app’s pages and assets so it loads quickly and shows an offline page | Until updated or cleared |
This storage stays on your device and is not sent to us for tracking.
Our network provider, Cloudflare, may set strictly necessary security cookies (such as __cf_bm) to protect the site from bots and attacks. When you pay, you are taken to Stripe’s checkout, which sets its own cookies for fraud prevention under Stripe’s cookie policy.
Under PECR, consent is not needed for storage that is strictly necessary for a service you have requested, or that simply remembers a setting you chose. Everything listed above falls into those categories, so we do not show a consent banner. If we ever add optional cookies, such as analytics, we will ask for your consent first and update this policy.
You can view and delete cookies and site data in your browser settings. If you block the cookies in section 3, you will not be able to sign in or open protected folders. Guidance for each browser is available at ico.org.uk.
For how we handle personal data, see our Privacy Policy. Questions: [email protected].