DucatDump legal
Cookies & Local Storage
Effective June 11, 2026. DucatDump uses strictly necessary authentication cookies, a first-party analytics consent cookie, and Google Analytics consent mode for product analytics.
Refresh cookie
The backend sets strictly necessary `ducatdump_access_token` and `ducatdump_refresh_token` cookies so logged-in users can access and refresh their session. These cookies are HTTP-only, use SameSite=Lax, and use Secure in production.
Local storage
The backend also sets a readable `ducatdump_csrf_token` cookie. The frontend sends it back as an `X-CSRF-Token` header on account-changing requests to protect cookie-based sessions from cross-site request forgery.
Analytics consent cookie
DucatDump stores your analytics preference in a first-party `ducatdump_cookie_consent` cookie. It records the consent version, whether analytics is granted or denied, and when the preference was saved. If the consent version changes, DucatDump may ask you again.
Google Analytics
DucatDump may use Google Analytics 4 for product analytics only. Google Analytics is loaded with consent mode and analytics storage denied by default. Page view analytics are sent only after analytics is accepted. When analytics is rejected or not yet chosen, DucatDump keeps analytics storage denied. DucatDump does not use advertising cookies, behavioral ads, remarketing, Google Signals, demographics, or interest reports.
Manage preferences
You can change your analytics preference at any time. Strictly necessary authentication storage remains active because it is required for login and account security.
Browser controls
You can clear cookies in your browser settings. Clearing authentication cookies may log you out or require a new login. Clearing the consent cookie may cause DucatDump to ask for your analytics preference again.