# Cookie and Storage Notice > How Dotless uses cookies and similar browser storage on its websites and product. Canonical: https://www.dotless.co/cookies ## 1. Scope This Notice explains how Dotless uses cookies, browser local storage, session storage, software-development-kit storage, pixels, and similar technologies (“storage technologies”) on dotless.co and the Dotless application. It forms part of the Privacy Policy. A cookie is a small text record sent by a website; local and session storage are records saved by the browser for a particular origin. These technologies may store a value on a device or cause the device to transmit identifiers and usage information. ## 2. Strictly necessary technologies These technologies are needed to provide a feature you request, maintain security, route requests, or remember a privacy choice. They cannot be disabled through a consent panel, although you can block them in the browser and some features may then fail. - Authentication and session: Authentication session tokens, refresh state, and account-routing values used to keep a user signed in, prevent unauthorized access, and separate workspaces. Names and lifetimes vary by authentication method and may be session-only or persist until logout, expiry, or the configured security limit. - OAuth, password recovery, and transaction state: short-lived nonce, verifier, redirect, recovery, checkout, and anti-forgery values needed to complete the requested flow and prevent interception or replay. These ordinarily expire when the flow ends or within hours. - Security and load delivery: provider-generated request, rate-limit, bot-prevention, or routing values used only where needed to protect and deliver the Service. Duration ranges from a request or session to the provider’s configured security window. - Consent and opt-out records: this website stores your analytics choice, notice version, and timestamp in local storage under dotless.analytics-consent.v1 for up to 180 days. It remembers acceptance and rejection for the same period. This necessary preference record is separate from analytics cookies and is not sent to an analytics provider. Choices apply to this website in this browser, not to the separately hosted Dotless application. ## 3. Functional and preference storage Functional storage remembers choices you make, such as theme, sidebar state, recent searches, workspace preferences, editor state, or whether a requested message was already shown. It is not used for cross-site advertising. Where local law requires consent for a non-essential preference, we request it before storage. - Application preferences: feature-specific local or session-storage values for display, editor, navigation, draft, or recent-search choices. Session values end when the browsing session ends; persistent values remain until cleared, the preference is reset, or the feature-specific expiry is reached. Account deletion does not necessarily clear data already stored in a browser. Assistant history: when you use the assistant, Dotless stores recent conversations and associated tool results in this browser to let you resume them. History is scoped to the account or workspace, holds up to 30 chats, and has no fixed time expiry. Delete chats in the app or clear site data on each device. Signing out does not itself clear this history. Use care on shared devices. Saved server-side memories and feedback have separate controls and retention described in the Privacy Policy. ## 4. Analytics and performance The Dotless application uses Vercel Web Analytics and Speed Insights to understand aggregate page use, performance, and technical errors. In the current configuration, Vercel Web Analytics is designed to operate without placing an analytics cookie; Vercel still receives request, page, device, approximate-location, and performance information needed to provide the measurement service. Speed and application telemetry may likewise be generated from browser and server requests. This website uses Google Analytics 4 (measurement ID G-QX2D2TWC3F) to measure page visits, section views, pricing choices, showcase video engagement, FAQ openings, and clicks on links to the Dotless application. Google Analytics remains blocked until you accept analytics. Before acceptance, and after rejection, we send no Google Analytics requests, including cookieless signals. If you accept, Google Analytics can set the \_ga and \_ga\_QX2D2TWC3F cookies to distinguish browsers and sessions. We configure these first-party cookies to expire after 180 days without automatically extending their expiry. Google receives page, event, request, device, browser, and approximate-location information to provide analytics. Advertising storage, advertising user data, personalization, and Google signals remain disabled. Google may process data outside the EEA under the transfer framework in section 7 of the Privacy Policy. App-link events include the page, button placement and label, destination path, and selected plan and display currency where relevant. We also send approved campaign labels from utm\_source, utm\_medium, utm\_campaign, utm\_id, and utm\_content after acceptance. We exclude other URL parameters, fragments, form values, and site-search text from our custom events. Campaign links must not contain personal data. Section and FAQ events are limited to one qualifying view or opening per page load; video progress reports playback milestones. An app click is an expression of interest, not proof of a signup or purchase. We use this information to maintain and improve the Service, relying on legitimate interests where permitted and consent where applicable law or the implementation of a storage technology requires it. Analytics or performance collection that requires consent will remain disabled until consent and will stop after withdrawal, which you can act on at any time through the Cookie settings control in the site footer. Withdrawing also deletes the analytics cookies already stored in that browser. We do not use these tools for cross-context behavioural advertising, and no advertising cookie is set. ## 5. Maps and third-party features In the Dotless application, a map feature may request OpenFreeMap-hosted tiles when you activate it. The tile service can then receive the IP address, browser and request data, requested tile coordinates, and approximate viewport. Google sign-in, payment, embedded media, code previews, Customer-selected integrations, or other third-party features may also set or read storage under their domains when you choose or activate them. Their notices govern their independent processing. Where storage or access by a non-essential third party requires consent, Dotless will not activate that feature until consent or a specific user request that legally permits the access. A map or integration may be unavailable if declined. Connecting or clicking a clearly identified third-party feature can transmit a request even when no Dotless cookie is set. ## 6. Customer-published websites A business that publishes a website through Dotless controls that website’s optional scripts, forms, integrations, and storage choices and is responsible for its own cookie notice, consent mechanism, legal basis, and vendor disclosures. Dotless-provided hosting and security technologies may remain strictly necessary processors for that customer. This Notice does not replace the publishing Customer’s notice. Dotless-hosted sites and shared previews can also send visit and interaction measurements for customer reports without setting analytics cookies. These requests may include page, referring-site and device information and a pseudonymous visit identifier. Absence of cookies does not remove the publishing customer’s notice, lawful-basis, or consent obligations where applicable. ## 7. Your choices This website also uses Cloudflare Web Analytics for aggregate traffic and performance statistics independently of the Google Analytics cookie choice. Its browser beacon measures visits, page views, referring sites, browser/device categories, approximate country, and page performance without analytics cookies, local storage identifiers, or cross-site profiles. Cloudflare receives network requests to deliver this service. These statistics can run before a Google choice or after rejecting Google cookies; rejecting Google does not disable Cloudflare. Our loader does not run when the browser sends Global Privacy Control or Do Not Track, or on localhost. Browser blockers, delivery failures, and Cloudflare settings may limit coverage. Counts describe visits and page views rather than an exact count of people currently online. Details: https://www.cloudflare.com/web-analytics/. On this website you can accept or reject Google Analytics cookies with equal ease. A choice dialog appears on a first visit and asks you to accept or reject before continuing. Either action closes it, and either choice is remembered for up to 180 days. Privacy notices remain readable before you decide. Opening the dialog or reading a notice does not grant consent. Reopen Cookie settings in the footer at any time to change your choice or withdraw consent. Withdrawal stops future Google Analytics collection, deletes accessible Google Analytics cookies, and refreshes the page to unload the Google Analytics script. It does not undo earlier lawful processing. If browser storage is unavailable, the choice applies to the current page and you may be asked again on navigation. A Global Privacy Control signal keeps Google Analytics disabled. You can also clear site data or block cookies in browser settings; doing so can sign you out or reset preferences in services that use that storage. If a technology appears that is not accurately described here, send the page, date, and observed cookie or storage name to support@dotless.co. We will investigate and update the implementation or this Notice. ## 8. Changes We update this Notice when storage technologies, providers, purposes, or retention materially change. Where a new use requires consent, we will request it before that use rather than treating continued browsing as consent.