Cookie Policy

1. Cookies and similar storage

Cookies are small records held by your browser and sent with certain requests. Local storage, session storage, IndexedDB and app preferences also store information on your device. Some records expire automatically; others remain until removed by the app, by you or by your browser. They are not all advertising tools.

2. Essential storage

These records support sign-in, security, features you request and your privacy choice. Blocking them can prevent those functions from working.

Sign-in and security

Dekkit uses a session cookie such as payload-token, normally valid for up to 30 days, and local authentication records such as token and authToken where needed by the app or extension. Token validity and local storage lifetime differ: local records can remain until sign-out or clearing. Administrative sessions can also use payload-admin-restore, with up to 30 days’ cookie lifetime.

Preferences and requested features

Theme, view mode, completed tours, drawer layout, recent selections, pending share data and cached content help keep your chosen experience working. Session storage normally lasts for the tab session; persistent browser or app storage can remain until overwritten or cleared. Clearing browser data does not delete your server-side account.

Cookie choice

dekkit-cookie-consent-v2 records whether you accepted analytics, the notice version and the time of the choice. We ask again after 180 days. This first-party local record is necessary to remember either acceptance or refusal, and is not sent to an advertising provider. The expired record may remain on the device until replaced or cleared.

3. Optional analytics

Visit analytics is blocked until you select Accept analytics. Selecting Reject analytics keeps it off. We use PostHog, hosted in the United States, for this. Acceptance allows PostHog to receive page-view events with the section of Dekkit you opened (for example “pricing” or “deck”, never the full address), the website domain you arrived from, campaign tags in the link you followed, and technical information such as IP address, browser, device type, screen size, language and time zone. We do not send Card text, titles, prompts, search queries or your account email as analytics event fields, and these visits are not linked to your account.

PostHog sets no analytics cookies for Dekkit. After acceptance it keeps a random visitor identifier and session information in your browser’s local and session storage, under names beginning with ph_, so that repeat visits can be counted. They remain until you withdraw permission or clear your browser storage. PostHog describes its practices in its privacy notice.

Google AdSense loads on dekkit.ai and dekkit.app. In the European Economic Area, the UK and Switzerland, Google’s message asks for advertising permission before personalized ads. Accepting analytics does not authorize advertising or personalized ads. Declining analytics does not prevent you from using Dekkit.

4. Apps and external services

Dekkit does not run visit analytics in its iOS, Android or desktop app shells. Those shells load the same AdSense tag as dekkit.app. Those apps still use local storage needed for authentication, preferences and requested features. Notification permission is a separate system choice; it is not a cookie preference.

If Dekkit hits a fault, the website or app sends PostHog a diagnostic report so we can fix it. This happens whatever your analytics choice, stores nothing on your device and is not linked to your account. Signed-in use of Dekkit is also measured on our servers, not through cookies. The Privacy Policy explains both, and how to turn account-level analytics off.

Apple or Google sign-in, Stripe checkout and external websites or embedded media may use their own storage when you use those services. Their notices apply to that activity. Our cookie controls govern Dekkit’s optional analytics; they cannot control a separate website you open.

5. Changing your choice

Open Cookie preferences in the website footer or the web app’s Settings. You can accept or withdraw analytics permission at any time. On withdrawal we stop visit analytics and remove the analytics identifier stored by this site. This does not erase information already received by PostHog; contact us to request that.

Your choice applies to the browser and site where it is made. The marketing website and web app ask separately; another browser or cleared storage requires a new choice. If storage is unavailable, we keep the choice for the current page session and may ask again next time.

You can also delete or block storage in your browser. This may sign you out or reset preferences. Contact hi@dekkit.ai for help or a privacy request.