Cookie Policy

This page explains every cookie dmrabbit sets, why it is set, and how long it lasts. It is deliberately short, because dmrabbit sets very few.

1. There is no cookie banner, and no tracking

dmrabbit sets no advertising cookies, uses no third-party analytics or tracking scripts, and never sells or shares your browsing behaviour.

Almost every cookie we set is strictly necessary to run the service you asked for, and those need no consent under ePrivacy rules. That leaves a single non-essential cookie, and rather than interrupt every visitor with a banner for one cookie, we simply do not set it for visitors in the EEA and the United Kingdom.

2. Strictly necessary cookies

These are required for the service to function. Without them you cannot sign in.

• Session. Keeps you signed in. This cookie is your session - without it every page would ask you to sign in again. Lasts 30 days, or until you sign out.
• Sign-in state (Instagram). A short-lived random value that protects the Instagram connection flow from being started by someone else on your behalf. Lasts 10 minutes.
• Sign-in state (Google). The same protection for Google sign-in. Short-lived.
• Pending sign-in. Remembers which email address you are signing in with, so reloading the page while you wait for your code does not send you back to the start. Lasts 15 minutes, the same as the code itself.

3. The referral cookie

If you arrive through someone's referral link, we record which link you followed so that person is credited if you subscribe. It lasts 30 days.

This is set for everyone, including in the EEA and UK. Following a referral link is itself the request to be attributed to that person, so honouring it is the service you asked for. Not setting it would quietly take a commission away from someone whose link worked.

4. The one non-essential cookie

Attribution. Records where you first heard about dmrabbit - the site you came from, or the campaign in the link - so we know which of our efforts are worth continuing. It lasts 30 days and holds no personal information.

It is not set at all for visitors in the EEA and the United Kingdom. If you are in those regions, nothing about where you came from is recorded, and signups from there are simply recorded as direct. Where we cannot determine your country, we treat you as though you were in the EEA and do not set it.

5. Browser storage

Beyond cookies, dmrabbit stores one small preference in your browser: whether you have dismissed the prompt inviting you to install the app. It never leaves your device.

6. Managing cookies

You can clear or block cookies in your browser settings. Blocking the strictly necessary ones will prevent you from signing in, because the session cookie is what keeps you signed in.

7. Questions

Write to [email protected]. See also our Privacy Policy.