Cookie Policy
Draft — pending legal-counsel review. Not yet for publication. See
README.md. Entity facts:COMPANY.md.Accuracy note: this policy must match the technologies *actually* used by our surfaces. A review (2026-07-08) found the product web app sets only strictly-necessary cookies and the marketing site (
apps/www) is cookieless — so neither needs a cookie-consent banner today. The product additionally runs first-party usage analytics via the browser'ssessionStorage(not cookies); we disclose it here and offer an in-app opt-out (Settings → Privacy). The PECR (Privacy and Electronic Communications Regulations) are technology-neutral — they cover cookies *and* similar access to information stored on your device — so the precise consent treatment of first-partysessionStorageanalytics is a point for legal-counsel review before publication (see the draft banner above). If we ever introduce analytics/advertising cookies or third-party trackers, a consent banner will be required before they are set.
- Owner: byRazLabs Ltd (trading as "Dena")
- Version: 1.1 (draft) — drafted 2026-06-05, updated 2026-07-08
- Related: Privacy Policy
1. What cookies are
Cookies are small text files placed on your device when you visit a website. Similar technologies (local storage, pixels, SDKs) work the same way. We group them as:
- Strictly necessary — required for the site/app to function (e.g. authentication,
security, load-balancing). These do not need consent under UK PECR.
- Functional — remember preferences (e.g. theme).
- Analytics/performance — help us understand usage.
- Marketing — used for advertising or campaign measurement.
2. Our approach
Dena's posture is minimal cookies:
- The web application (the logged-in product) uses **only strictly-necessary
cookies — the session/authentication cookies set by our identity provider (Clerk) and by the app to keep you securely logged in. There are no advertising or analytics cookies** in the product.
- We do run first-party usage analytics (to understand how the product is used and
to debug problems), but it uses no cookies: it writes two short-lived keys (dena.analytics.sid, dena.analytics.login) to your browser's sessionStorage (cleared when you close the tab) and sends only content-minimised interaction events to our own servers. There are no third-party trackers, no advertising, and none of your inspection content in these events. You can opt out at any time in Settings → Privacy; opting out stops both the events and the sessionStorage writes. We disclose it here for transparency even though it is not a cookie (see §4).
- The marketing website (denainfra.com /
apps/www) is cookieless: it sets **no
cookies and no analytics or tracking technologies of its own, so it requires no consent banner**.
3. Cookies we set
| Name / pattern | Type | Purpose | Set by | Duration |
|---|---|---|---|---|
__session, __clerk_* | Strictly necessary | Authenticate and maintain your logged-in session | Clerk (our IdP) | Session / per Clerk config |
__cf_* / CDN cookies | Strictly necessary | Security, routing, load-balancing | Hosting/CDN | Session–short |
| App preference keys (local storage) | Functional | Remember UI preferences (e.g. theme) | Dena app | Until cleared |
dena.analytics.sid, dena.analytics.login (sessionStorage — not a cookie) | First-party usage analytics | Understand product usage and debug; content-minimised, opt-out in Settings → Privacy | Dena app | Session (cleared when the tab closes) |
We set no analytics or advertising cookies on either surface; the analytics row above is sessionStorage, listed here for transparency, and the marketing site is cookieless.
(Strictly-necessary cookies are exempt from the consent requirement; everything else is only set after consent.)
4. Managing cookies
- Consent (non-essential cookies): we do not currently set any non-essential cookies.
If we ever do, you will be able to accept or reject them via a consent banner and change your choice any time via the banner's settings link. [TODO: wire the banner + preferences link if/when non-essential cookies are introduced.]
- Usage analytics: you can turn off the product's first-party usage analytics (see §2)
at any time in Settings → Privacy in the app; this also stops the related sessionStorage writes.
- Browser controls: you can block or delete cookies (and clear site storage) in your
browser settings. Blocking strictly-necessary cookies will stop you logging in.
5. Changes
We update this policy when our cookie use changes. The version and date above reflect the current version.
6. Contact
Questions: privacy@denainfra.com.
Revision history
| Version | Date | Change | Author |
|---|---|---|---|
| 1.0 (draft) | 2026-06-05 | Initial draft | AI session — pending counsel review + cookie audit |
| 1.1 (draft) | 2026-07-08 | Disclose first-party sessionStorage usage analytics + in-app opt-out (Settings → Privacy); record marketing site as cookieless; close analytics/marketing [TODO]s (gdpr-compliance / ADR-0046 / ADR-0059) | AI session — pending counsel review |