DUEX sets one cookie. It keeps you signed in. There is no advertising, no tracking, and no third-party analytics cookie on this site.
1. What we set
| Name | Purpose | Type | Expires |
|---|---|---|---|
duex_session |
Keeps you signed in to the operator console and identifies your session on each request. Without it you cannot use the service. | Strictly necessary | 12 hours, or on sign-out |
It is set with HttpOnly (JavaScript cannot read it), Secure (HTTPS
only) and SameSite=Strict (not sent on cross-site requests). Only a SHA-256 hash of
the token is stored on our servers.
2. Why there is no cookie banner
DUEX is offered only in the United States. United States law requires disclosure of cookie use — which is what this page is — rather than a consent prompt. In any event we set no advertising, analytics or tracking cookie, and the one cookie we do set is strictly necessary to keep you signed in to a session you initiated. A banner asking permission for that would be theatre.
We do not sell or share personal information for cross-context behavioural advertising, so no "Do Not Sell or Share My Personal Information" mechanism is required.
If we ever introduce analytics or marketing cookies, we will ask first and update this page.
3. Local storage
The console may store small interface preferences in your browser's local storage. These stay on your device, are not sent to us, and contain no personal data.
4. Third parties
- Stripe may set cookies on its own hosted checkout pages, governed by Stripe's cookie policy. Those pages are not part of this site.
- GitHub may set cookies during sign-in, governed by GitHub's policies.
- Cloudflare may set a security cookie to protect against malicious traffic.
5. Controlling cookies
You can block or delete cookies in your browser settings. Blocking duex_session
will prevent you from signing in — the service cannot function without it.
6. Changes
Updates will be posted here. See also our Privacy Policy.