Cookie and Storage Notice
How Dotless uses cookies and similar browser storage on its websites and product.
Last updated August 14, 2026
1. Scope
This Notice explains how Dotless uses cookies, browser local storage, session storage, software-development-kit storage, pixels, and similar technologies (“storage technologies”) on dotless.co and the Dotless application. It forms part of the Privacy Policy. A cookie is a small text record sent by a website; local and session storage are records saved by the browser for a particular origin. These technologies may store a value on a device or cause the device to transmit identifiers and usage information.
2. Strictly necessary technologies
These technologies are needed to provide a feature you request, maintain security, route requests, or remember a privacy choice. They cannot be disabled through a consent panel, although you can block them in the browser and some features may then fail.
•
Authentication and session: Supabase or Dotless session tokens, refresh state, and account-routing values used to keep a user signed in, prevent unauthorized access, and separate workspaces. Names and lifetimes vary by authentication method and may be session-only or persist until logout, expiry, or the configured security limit.
•
OAuth, password recovery, and transaction state: short-lived nonce, verifier, redirect, recovery, checkout, and anti-forgery values needed to complete the requested flow and prevent interception or replay. These ordinarily expire when the flow ends or within hours.
•
Security and load delivery: provider-generated request, rate-limit, bot-prevention, or routing values used only where needed to protect and deliver the Service. Duration ranges from a request or session to the provider’s configured security window.
•
Consent and opt-out records: the privacy choices, region, policy version, and timestamp needed to remember and prove a choice. These may persist for up to 12 months before reconfirmation, or longer where needed to retain an objection or suppression record.
3. Functional and preference storage
Functional storage remembers choices you make, such as theme, sidebar state, recent searches, workspace preferences, editor state, or whether a requested message was already shown. It is not used for cross-site advertising. Where local law requires consent for a non-essential preference, we request it before storage.
•
Application preferences: feature-specific local or session-storage values for display, editor, navigation, draft, or recent-search choices. Session values end when the browsing session ends; persistent values remain until cleared, the preference is reset, the account is deleted, or the feature-specific expiry is reached.
4. Analytics and performance
The Dotless application uses Vercel Web Analytics and Speed Insights to understand aggregate page use, performance, and technical errors. In the current configuration, Vercel Web Analytics is designed to operate without placing an analytics cookie; Vercel still receives request, page, device, approximate-location, and performance information needed to provide the measurement service. Speed and application telemetry may likewise be generated from browser and server requests.
This website also uses Google Analytics 4, measurement ID G-W8F01DSMVB, in Google Consent Mode. Until you accept analytics, the tag stores nothing on your device and sends only a cookieless signal that Google reports in aggregate or as a modelled estimate, with no identifier kept in your browser and no ad click identifiers included. If you accept, Google Analytics sets the ga and gaW8F01DSMVB cookies, which hold a pseudonymous identifier used to recognise a returning browser and to group page views into a session. Both expire two years after they are last set or refreshed. Google then receives request, page, device, browser, and approximate-location information derived from the IP address in order to provide the measurement service. Google Consent Mode carries your choice to the tag, and the advertising signals it defines (adstorage, aduserdata, ad_personalization) stay denied at all times. Google may process this information outside the EEA, under the transfer framework described in section 7 of the Privacy Policy.
We use this information to maintain and improve the Service, relying on legitimate interests where permitted and consent where applicable law or the implementation of a storage technology requires it. Analytics or performance collection that requires consent will remain disabled until consent and will stop after withdrawal, which you can act on at any time through the Cookie settings control in the site footer. Withdrawing also deletes the analytics cookies already stored in that browser. We do not use these tools for cross-context behavioural advertising, and no advertising cookie is set.
5. Maps and third-party features
In the Dotless application, a map feature may request OpenFreeMap-hosted tiles when you activate it. The tile service can then receive the IP address, browser and request data, requested tile coordinates, and approximate viewport. Google sign-in, payment, embedded media, code previews, Customer-selected integrations, or other third-party features may also set or read storage under their domains when you choose or activate them. Their notices govern their independent processing.
Where storage or access by a non-essential third party requires consent, Dotless will not activate that feature until consent or a specific user request that legally permits the access. A map or integration may be unavailable if declined. Connecting or clicking a clearly identified third-party feature can transmit a request even when no Dotless cookie is set.
6. Customer-published websites
A business that publishes a website through Dotless controls that website’s optional scripts, forms, integrations, and storage choices and is responsible for its own cookie notice, consent mechanism, legal basis, and vendor disclosures. Dotless-provided hosting and security technologies may remain strictly necessary processors for that customer. This Notice does not replace the publishing Customer’s notice.
7. Your choices
Where a Dotless consent control is displayed, you can accept, reject, or choose non-essential categories with equal ease and later reopen the control to withdraw consent. On this website the control appears on a first visit, records the answer for up to 12 months, and can be reopened at any time from Cookie settings in the footer. Withdrawal does not affect earlier lawful processing. You can also clear site data or block cookies in browser settings; doing so can sign you out, reset preferences, or prevent a requested feature. Browser privacy signals are honoured where applicable law requires an opt-out that the signal validly communicates.
If a technology appears that is not accurately described here, send the page, date, and observed cookie or storage name to support@dotless.co. We will investigate and update the implementation or this Notice.
8. Changes
We update this Notice when storage technologies, providers, purposes, or retention materially change. Where a new use requires consent, we will request it before that use rather than treating continued browsing as consent.
