This policy explains which cookies and similar technologies Filetable uses on its website and in its application, what they are used for, and how you can manage them.
Version 1.6 — effective 2026-09-28
Filetable currently uses only technologies that are strictly necessary to provide the service or that store a preference you have set. We do not use advertising cookies, tracking pixels or third-party analytics scripts, and the website does not load scripts from third parties. For this reason, no consent banner is displayed.
If we introduce a technology that requires your consent, we will update this policy beforehand and ask for your consent before it is used.
A cookie is a small text file that a website stores in your browser. This policy also covers other technologies that store or read information on your device, such as localStorage and sessionStorage, which are subject to the same rules under Article 5(3) of the ePrivacy Directive (2002/58/EC) and Article 45c of the Swiss Telecommunications Act (FMG/LTC).
This policy applies to the Filetable website and application. It does not cover the documents and data you upload to your workspace, which are governed by our Privacy Policy and, where we act as your processor, by the Data Processing Agreement.
In Switzerland, Article 45c let. b FMG/LTC requires that users be informed about the processing of data on their device and be able to refuse it. The guidelines of the Federal Data Protection and Information Commissioner (FDPIC) further distinguish between strictly necessary technologies, which require information only, and technologies used for advertising, profiling or cross-site tracking, which require consent.
In the European Union and the European Economic Area, Article 5(3) of the ePrivacy Directive and its national implementations require prior consent for any technology that is not strictly necessary to provide a service you have requested. In the United Kingdom, the Privacy and Electronic Communications Regulations apply the same requirement.
Filetable applies the stricter EU standard to all visitors: analytics, advertising and tracking technologies are used only with your prior consent, and refusing is as easy as accepting. Technologies that are strictly necessary, or that remember a setting such as your language, the layout of the interface or the currency in which prices are shown, do not require consent and never track you.
The following cookies are set by Filetable on its own domain. Authentication cookies are served with the __Secure- or __Host- prefix over HTTPS, are not accessible to scripts (HttpOnly) and use the SameSite=Lax attribute.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| next-auth.session-token | Filetable | Keeps you signed in. Contains a signed session token, not your password. | Strictly necessary | 30 days; deleted on sign-out or password change |
| next-auth.csrf-token | Filetable | Protects the sign-in and sign-out forms against cross-site request forgery. | Strictly necessary | Session |
| next-auth.callback-url | Filetable | Returns you to the page you were on after signing in. | Strictly necessary | Session |
| next-auth.state, next-auth.pkce.code_verifier | Filetable | Secure sign-in with Google. Set only during that sign-in. | Strictly necessary | 15 minutes |
| NEXT_LOCALE | Filetable | Remembers your language. | Functional | 1 year |
| ft_consent | Filetable | Records your cookie preferences. | Strictly necessary | 6 months |
The following localStorage and sessionStorage entries are used by the application. They are not transmitted to our servers, except where the table says otherwise, and are used only for the purpose stated. Clearing your browser's site data removes them without affecting your account.
When you use the mobile document scanner, captured pages are stored in your browser until they are uploaded, so that no work is lost if the connection is interrupted. This storage may contain images of the documents being scanned. It is linked to your user account and workspace, deleted once the pages are uploaded, and cleared when you sign out.
| Key | Purpose | Category | Duration |
|---|---|---|---|
| filetable.preferences | Local copy of your interface settings, such as panel sizes, so the application displays correctly before they are loaded from our servers. | Functional | Until sign-out |
| filetable.billing.country, filetable.billing.currency | Country and currency used to display prices, so that they remain consistent from one page to the next. | Functional | Until cleared |
| filetable.billing.checkoutIntent (sessionStorage) | Set when you start a purchase: the plan chosen and whether the purchase was started from a dialog or a page, then, on your return from Stripe's checkout page, the workspace and checkout session identifiers. The session identifier is sent to our servers to confirm the purchase, including after a page reload. | Strictly necessary | Deleted once the purchase is confirmed or cancelled, after a limited number of confirmation attempts, or when the browser tab is closed |
| scan-document-<userId>-<workspaceId> | Pages captured with the mobile scanner that have not yet been uploaded, including page images. | Functional | Deleted on upload or sign-out |
Filetable does not currently use any technology that requires your consent. No consent banner is therefore displayed, and the cookie link in the footer of our website and the cookie section under Settings > Privacy lead to this policy.
If we introduce a technology that requires your consent, a banner will ask for your choice before that technology is used, and you will be able to review and change your choice at any time through the cookie link in the footer of our website or, once signed in, under Settings > Privacy. Withdrawing consent will be as easy as giving it, and will take effect immediately.
When you make a choice, it is stored in the ft_consent cookie. To be able to demonstrate your choice, as required by Article 7(1) GDPR, we also keep a record on our servers containing the categories accepted or refused, the date and time, the version of this policy, the language and the page on which the choice was made. This record is linked to the random identifier contained in the ft_consent cookie and, if you were signed in, to your account. It does not contain your name, email address or IP address. It is kept for ten years and is not used for any other purpose.
Access to Filetable never depends on accepting technologies that require your consent.
You can also block or delete cookies and site data through your browser settings. Blocking strictly necessary cookies will prevent you from signing in.
Filetable honours the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a refusal of all technologies that require your consent.
Payments are processed on Stripe's hosted checkout page. Filetable's website does not load any Stripe script; cookies set on Stripe's pages are governed by Stripe's own privacy and cookie policies.
Web fonts are served from Filetable's own domain. Address autocomplete in the application is requested by our servers from our address-completion provider (see the sub-processor list, /legal/subprocessors), not by your browser, so your IP address is not disclosed to that provider when you use it.
We update this policy when we add or remove a technology. The current version and its effective date are shown at the top of this page.
Filetable is operated by Trembley et Burgermeister SA, Chemin de l'Epinglier 4, 1242 Satigny, Switzerland (UID CHE-101.917.143). Questions about this policy: privacy@filetable.com.
Create your workspace in a few minutes, upload a first batch and watch it organize itself.
