Legal
Cookie Policy
Last updated: July 15, 2026
What are cookies
Cookies are small text files the browser stores on your device. Discrofy uses cookies where needed for authentication and security. This policy also covers closely related technologies (for example the same site storage rules apply if you mirror behavior with storage APIs).
Cookies we use today
Essential (dashboard)
Session cookie for signed-in customers (for example `discrofy-session`). HTTP-only, used to keep you authenticated and to enforce organization scope. Required for the logged-in product.
Essential (2FA pending login)
Short-lived HTTP-only cookie `discrofy-2fa-pending` set after password check when two-factor authentication is required. Cleared after a successful 2FA challenge or when it expires.
Essential (platform admin)
Separate HTTP-only cookie for the optional admin console (for example `discrofy-admin-session`). Not set for normal dashboard users.
Essential (launch preview)
When a pre-launch gate is enabled, the signed HTTP-only cookie `discrofy_launch_preview` unlocks browsing for people with a valid preview link. Not used for marketing tracking.
Analytics (optional)
If enabled for a deployment, Google Analytics 4 and Microsoft Clarity load only after you accept analytics cookies in the consent banner. Choice is stored in local storage as `discrofy-analytics-consent`. Reject keeps the site fully usable without those scripts.
Error monitoring (Sentry Session Replay)
When Sentry is configured for a deployment, Session Replay may capture limited session recordings (DOM snapshots and related diagnostics) to investigate errors and reliability. This is operational monitoring, not advertising analytics, and is separate from the optional GA4/Clarity consent banner. Session Replay does not store a dedicated first-party marketing cookie; Sentry uses its SDK/network channel when enabled.
Optional Google Analytics and Microsoft Clarity scripts are not loaded until you accept. You can change your choice later by clearing site data for this domain (or removing discrofy-analytics-consent from local storage) and reloading the page.
Managing cookies
You can block or delete cookies in the browser. Blocking essential authentication cookies will prevent sign-in or will sign you out. Rejecting analytics cookies (or using the banner Reject action) stops Google Analytics and Microsoft Clarity from running.
Contact
Questions: [email protected].