LimnPrivacy Policy
Cookie Notice
Every cookie Limn sets, what each one is for, how long it lasts, and how to control them.
- Last updated
- October 18, 2026
Summary of changes
- First published as its own page, with every cookie listed by name.
On this page
A cookie is a small piece of text a website asks your browser to keep and send back on later visits. Limn uses cookies for the few jobs that need one, and keeps one value in your browser's own storage for the same reason. Names below are the ones your browser shows; on a secure connection most carry a __Secure- prefix in front.
Limn sets no advertising cookies and no cookies from advertising companies on its own website or app.
These make Limn work: signing in, staying signed in, and returning from another company's page to the one you left. They cannot be switched off without breaking the thing they do, so they are set without asking.
authjs.session-token- What it does
- Keeps you signed in to Limn. Without it every page would ask you to sign in again.
- How long
- 30 days
- Where
- The Limn app
authjs.stateauthjs.pkce.code_verifierauthjs.nonceauthjs.csrf-tokenauthjs.callback-url- What it does
- Carry a sign-in with Google or Facebook from our page to theirs and back, and prove the answer that comes back is the one we asked for.
- How long
- 15 minutes, or until the browser closes
- Where
- The sign-in screen
limn_preauth- What it does
- Holds your place between your password and your second-step code, when two-step sign-in is switched on.
- How long
- 5 minutes
- Where
- The sign-in screen
authjs.apple-link- What it does
- Remembers which account you are linking while you confirm a sign-in with Apple.
- How long
- 15 minutes
- Where
- The sign-in screen
limn-orglimn-location- What it does
- Remember which agency and which business you are working in, so the app opens on the records you were looking at.
- How long
- 1 year
- Where
- The Limn app
limn-admin-open- What it does
- Set only when Limn's own support staff open your workspace to help, and ends their visit on time.
- How long
- 1 hour
- Where
- The Limn app
limn-feature-preview- What it does
- Set only when an admin chooses to see a business the way one of its roles sees it.
- How long
- 4 hours
- Where
- The Limn app
limn-social-stategcal_oauthmscal_oauthmsmail_oauthanalytics_oauthgoogle_agency_oauthlimn_connect_return- What it does
- Set while you connect a social, calendar, mailbox, analytics or advertising account, so the answer from that company returns to the business you started from.
- How long
- 30 minutes
- Where
- The Limn app
limn.portal-sessionlimn.portal-return- What it does
- Keep a business's customer signed in to the customer portal, and return them to the page they opened after they sign in.
- How long
- 30 days for the session; 15 minutes for the return address
- Where
- A business's customer portal
limn.sign.…- What it does
- Remembers that you entered the access code a business set on a document, so you are not asked again while you sign it.
- How long
- 4 hours
- Where
- A document sent for signature
| Cookie | What it does | How long | Where |
|---|---|---|---|
authjs.session-token | Keeps you signed in to Limn. Without it every page would ask you to sign in again. | 30 days | The Limn app |
authjs.stateauthjs.pkce.code_verifierauthjs.nonceauthjs.csrf-tokenauthjs.callback-url | Carry a sign-in with Google or Facebook from our page to theirs and back, and prove the answer that comes back is the one we asked for. | 15 minutes, or until the browser closes | The sign-in screen |
limn_preauth | Holds your place between your password and your second-step code, when two-step sign-in is switched on. | 5 minutes | The sign-in screen |
authjs.apple-link | Remembers which account you are linking while you confirm a sign-in with Apple. | 15 minutes | The sign-in screen |
limn-orglimn-location | Remember which agency and which business you are working in, so the app opens on the records you were looking at. | 1 year | The Limn app |
limn-admin-open | Set only when Limn's own support staff open your workspace to help, and ends their visit on time. | 1 hour | The Limn app |
limn-feature-preview | Set only when an admin chooses to see a business the way one of its roles sees it. | 4 hours | The Limn app |
limn-social-stategcal_oauthmscal_oauthmsmail_oauthanalytics_oauthgoogle_agency_oauthlimn_connect_return | Set while you connect a social, calendar, mailbox, analytics or advertising account, so the answer from that company returns to the business you started from. | 30 minutes | The Limn app |
limn.portal-sessionlimn.portal-return | Keep a business's customer signed in to the customer portal, and return them to the page they opened after they sign in. | 30 days for the session; 15 minutes for the return address | A business's customer portal |
limn.sign.… | Remembers that you entered the access code a business set on a document, so you are not asked again while you sign it. | 4 hours | A document sent for signature |
This one exists so that a choice you made is not asked again on every visit.
_lmnc- What it does
- Remembers whether you accepted or declined optional cookies on a business's booking page or form, so you are not asked on every visit. A copy is kept in the browser's own storage for browsers that refuse cookies.
- How long
- 1 year
- Where
- A business's booking pages, forms and website
| Cookie | What it does | How long | Where |
|---|---|---|---|
_lmnc | Remembers whether you accepted or declined optional cookies on a business's booking page or form, so you are not asked on every visit. A copy is kept in the browser's own storage for browsers that refuse cookies. | 1 year | A business's booking pages, forms and website |
A business using Limn can put a snippet on its own website and add its own measurement tags to its booking pages and forms. For those, the business decides what is set and is responsible for telling you.
_lmnv- What it does
- A random visitor number, set by the snippet a business adds to its own website, so it can see which pages a visitor read before they booked or filled in a form. It is not set once a visitor declines optional cookies.
- How long
- 90 days
- Where
- A business's own website
| Cookie | What it does | How long | Where |
|---|---|---|---|
_lmnv | A random visitor number, set by the snippet a business adds to its own website, so it can see which pages a visitor read before they booked or filled in a form. It is not set once a visitor declines optional cookies. | 90 days | A business's own website |
A business can also add its own analytics, advertising or tag-manager code to its booking pages and forms. When that business has its cookie banner switched on, that code loads only after you accept optional cookies. The business's own privacy policy describes what its tags collect.
To see how our website and app perform, we count page views and measure how quickly pages load. The service that does this for us sets no cookies and keeps no record that identifies you across sites. When something breaks, an error report is sent to our error-reporting provider with personal details removed; on the website it can include a short recording of the screen around the error with every word and every field hidden. Neither sets a cookie. Inside Limn's phone app no screen recording is made.
Every browser lets you see, block and delete cookies, usually under Settings, then Privacy. Blocking the strictly necessary ones signs you out and stops sign-in from working. Clearing them signs you out everywhere you cleared them.
On a business's booking page or form with a cookie banner, you can accept or decline optional cookies. To change your answer, clear the cookies for that site and you will be asked again.
How we use what these cookies help collect is in our Privacy Policy. Questions go to support@launchwithlimn.com.