Cookies & Local Storage
Version 2026-09-27.2 · applies to Workniva at workniva.com and the field attendance app.
Sign-in and security cookies
Workniva uses cookies such as sessionid for authenticated sessions and csrftoken to help protect form submissions. Session and verification flows, including an optional identity provider, may use additional necessary cookies. Blocking these can prevent login and secure forms from working. Signing out ends access to the session; use browser controls to remove stored cookies.
Appearance preferences
Your browser can retain wn-theme and wn-mode in localStorage so the site remembers the selected colour theme and light/dark preference. These preferences stay until overwritten or removed using browser storage controls.
Field PWA storage
The field app caches its public shell and static assets for offline use. It does not intentionally cache private API responses, payroll pages, login pages or private photo downloads in its service worker. IndexedDB holds the encrypted field workspace and unsent queue described in the Privacy Policy. Its expiry is checked while the page runs or next opens; closing the browser does not guarantee deletion at the expiry time. Delete the local workspace or clear site data to remove it, understanding that unsent events will be lost.
External requests and optional monitoring
Public pages load fonts from Google Fonts, which receives a request including network/browser information. Sentry receives diagnostic events about software errors, processed in the European Union and configured without personal data, and Google login or Cashfree checkout may load provider resources. This application does not currently include an advertising-cookie or behavioural-advertising integration. That does not mean external services receive no technical data. Nonessential analytics or advertising must be assessed and disclosed before being added; this page is not a consent mechanism for future trackers.
Your controls
Use your browser’s site settings to inspect or clear cookies, local storage and permissions. You can decline camera, microphone and location requests individually. Clearing site data can sign you out, remove preferences and erase unsent field events. For questions, use the privacy contact email or the Contact page.