Cookie Policy

This Cookie Policy explains how Decklyn Inc. ("Decklyn", "we", "us") uses cookies and similar browser technologies when you visit getdecklyn.com or use the Decklyn app.

The short version: we use only the cookies we need to keep the service running securely and to remember that you are signed in. We do not use advertising cookies, we do not use cross-site tracking cookies, and we do not share cookie data with ad networks or data brokers.

Cookies are small text files that a website stores on your device when you visit. They are sent back to the same website on each subsequent visit so the site can remember things like whether you are signed in.

We also use similar technologies, including session storage and local storage in your browser, for the same narrow purposes. This policy covers all of them.

These cookies are required for Decklyn to work. Without them, you cannot sign in, stay signed in, or use the app securely. Because they are essential to the service, they cannot be opted out of without stopping your use of Decklyn.

• Authentication session cookie: a secure, HttpOnly cookie that keeps you signed in during your session. It is set when you sign in and deleted when you sign out or after a period of inactivity. It cannot be read by JavaScript on the page.
• CSRF token cookie: a cookie used to prevent cross-site request forgery, a type of attack where another website attempts to make unauthorized requests on your behalf. It is created alongside your session and deleted with it.
• Billing session cookie: if you visit a checkout page to subscribe to Pro or Team, a short-lived cookie is set to maintain the state of the checkout flow until it is complete. It is deleted after the flow ends.

Local storage (not cookies): we use your browser's local storage to remember lightweight interface preferences, such as a theme setting or an acknowledged notice. This data is stored only on your device and is not sent to our servers. It does not identify you.

Decklyn does not use third-party advertising cookies. We do not place tracking pixels, beacons, or fingerprinting scripts. We do not participate in cookie-based advertising networks. We do not share cookie data with data brokers.

We do not use analytics cookies that follow you across other websites. Any usage analytics we collect to understand how people use Decklyn are aggregated and anonymized and do not use cross-site tracking technologies.

Our use of third-party services that may set their own cookies is narrow:

• Stripe: if you visit a checkout page to subscribe to a paid plan, our payment processor (Stripe) may set cookies necessary to process the transaction securely and to prevent fraud. These cookies are governed by Stripe's own privacy and cookie policy, which you can find at stripe.com/privacy.

We do not embed social media buttons, advertising widgets, or other third-party content that would set cookies without your knowledge. We do not load third-party scripts at page load that place tracking cookies.

You can view, block, or delete cookies at any time through your browser settings. The steps vary by browser:

• Chrome: Settings, then Privacy and security, then Cookies and other site data.
• Safari: Settings, then Safari, then Advanced, then Website Data.
• Firefox: Settings, then Privacy and Security, then Cookies and Site Data.
• Edge: Settings, then Cookies and site permissions, then Cookies and site data.

If you block or delete the essential session cookie, you will not be able to sign in to Decklyn. Blocking local storage may reset your interface preferences on each visit. Other than that, controlling cookies does not affect your ability to read public pages on our site.

We will update this policy if our cookie practices change. We will post the updated policy with a new effective date. If the changes are material, we will let you know.

Questions about this policy or how we use cookies can go to privacy@getdecklyn.com.

Decklyn Inc., 2 Embarcadero Center, Suite 1420, San Francisco, CA 94111, United States.