Cookie Policy
Last updated: July 2, 2026
1. What Are Cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to the website operators. Cookies may be set by the website you are visiting (“first-party cookies”) or by third-party services embedded in the website (“third-party cookies”).
In addition to cookies, we may use similar technologies such as local storage and session storage to store information on your device. For simplicity, we refer to all of these technologies as “cookies” throughout this policy.
2. Types of Cookies We Use
Cookies can be classified by their lifespan and origin:
Session Cookies
Temporary cookies that expire when you close your browser. These are essential for core functionality like keeping you signed in as you navigate between pages.
Persistent Cookies
Cookies that remain on your device for a set period or until you delete them. These help us remember your preferences and recognise you on return visits.
First-Party Cookies
Cookies set directly by dutyscope.com. We control the data these cookies collect.
Third-Party Cookies
Cookies set by external services that we use to deliver functionality (such as authentication, payments, and analytics). These third parties have their own privacy policies.
3. How DutyScope Uses Cookies
DutyScope uses cookies for the following purposes:
3.1 Essential Cookies (Strictly Necessary)
These cookies are necessary for the Service to function and cannot be switched off. They are generally set in response to actions you take, such as logging in, setting your privacy preferences, or filling in forms. The Service would not work properly without them.
| Cookie / Storage | Provider | Purpose | Duration |
|---|---|---|---|
| authjs.session-token | DutyScope (Auth.js) | Maintains your authenticated session | Session / 30 days |
| authjs.csrf-token | DutyScope (Auth.js) | Protects against cross-site request forgery attacks | Session |
| authjs.callback-url | DutyScope (Auth.js) | Stores the intended destination after OAuth sign-in | Session |
| cookie-consent | DutyScope | Stores your cookie consent preferences | 12 months |
| Stripe cookies (various) | Stripe | Fraud prevention and payment processing on checkout pages | Session / 1 year |
3.2 Functional Cookies
These cookies enable the Service to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we use on our pages. If you do not allow these cookies, some of our services may not function optimally.
| Cookie / Storage | Provider | Purpose | Duration |
|---|---|---|---|
| theme-preference | DutyScope | Remembers your light/dark mode preference | Persistent |
| Google OAuth cookies | Facilitate secure sign-in via your Google account | Session |
3.3 Analytics Cookies (Optional)
When enabled, these cookies help us understand how users interact with the Service by collecting anonymous usage information. This allows us to improve features, measure performance, and identify areas that need attention. Analytics cookies are only set if you have given your explicit consent through our cookie banner.
| Cookie / Storage | Provider | Purpose | Duration |
|---|---|---|---|
| ph_* | PostHog | Anonymous product analytics (page views, feature usage, interactions) | 1 year |
| $posthog_* | PostHog | User identification and session tracking for analytics | 1 year |
PostHog analytics data is hosted on EU servers (eu.posthog.com). We do not send compliance data, document content, or personally identifiable business information to PostHog. You can learn more about PostHog’s data handling at posthog.com/privacy.
4. Why We Use Cookies
We use cookies for several legitimate purposes essential to operating our SaaS platform:
- Authentication: To keep you securely signed in and protect your account from unauthorised access.
- Security: To detect and prevent fraud, abuse, and cross-site request forgery (CSRF) attacks.
- Payments: Stripe sets essential cookies on our checkout page to process payments securely, prevent fraud, and comply with PCI DSS requirements.
- User Experience: To remember your preferences (such as theme) and provide a consistent experience across visits.
- Analytics: When consented, to understand how users interact with the Service so we can improve features and usability.
5. Cookie Consent
When you first visit DutyScope, you are presented with a cookie consent banner that explains what cookies we use and gives you control over which categories you accept. By clicking “Accept All”, you consent to all cookie categories described in this policy. By clicking “Essential Only” or customising your preferences, you consent only to strictly necessary cookies.
Essential cookies do not require consent under the ePrivacy Directive (2002/58/EC, as amended) and GDPR, as they are necessary for the Service to function. Non-essential cookies (analytics and certain functional cookies) are only set after you have given your explicit consent.
Your consent preferences are stored in a cookie on your device for 12 months. After this period, or if you clear your browser cookies, you will be prompted again. You can change your preferences at any time by clicking the “Cookie Settings” link in the footer of our website or through your browser settings.
6. How to Control or Delete Cookies
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some cookies, delete existing cookies, or alert you when a website sets a cookie. Please note that blocking essential cookies may prevent parts of the Service from functioning properly.
Instructions for managing cookies in the most common browsers:
- Google Chrome: Settings → Privacy and security → Cookies and other site data. Full instructions
- Safari: Preferences → Privacy → Manage Website Data. Full instructions
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data. Full instructions
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data. Full instructions
For other browsers, please refer to the browser’s help documentation. You can also visit www.allaboutcookies.org for comprehensive information about managing cookies across a wide range of browsers.
7. Specific Third-Party Cookies in Detail
Stripe
Stripe, our payment processor, sets cookies on our checkout and billing pages to process payments securely and prevent fraud. These cookies are necessary for payment functionality and are covered by Stripe’s own privacy and cookie policies. You can review Stripe’s cookie policy at stripe.com/cookies-settings.
Auth.js
Auth.js (formerly NextAuth.js) is the authentication library we use to manage user sessions. It sets session tokens and CSRF tokens that are strictly necessary for secure login and account protection. These are first-party cookies set by dutyscope.com.
Google OAuth
If you choose to sign in with your Google account, Google sets cookies to facilitate the authentication flow. These cookies are subject to Google’s privacy policy at policies.google.com/privacy.
PostHog
PostHog is our product analytics provider (opt-in only). PostHog uses cookies to collect anonymous usage data, such as pages visited and features used. No compliance data or documents are sent to PostHog. These cookies are only set if you consent via our cookie banner. PostHog’s cookie information is available at posthog.com/docs/privacy.
8. Do Not Track
Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not want to be tracked. There is currently no consensus on how websites should respond to DNT signals, and DutyScope does not currently respond to DNT signals from browsers. Instead, we give you direct control through our cookie consent banner, which allows you to choose exactly which cookie categories you accept.
9. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our cookie practices, the services we use, or legal requirements. When we make changes, we will update the “Last updated” date at the top of this page. For material changes, we will notify you via the cookie consent banner, requiring a new consent. We encourage you to review this policy periodically.
10. Contact Us
If you have questions about this Cookie Policy or our use of cookies, please contact us:
11. Manage Your Cookie Preferences
You can change your cookie preferences at any time. Click the button below to reopen the consent banner and adjust which categories of cookies you accept.
12. Related Documents
This Cookie Policy should be read alongside our other legal documents:
- Privacy Policy — How we collect, use, and protect your personal data.
- Terms of Service — The terms governing your use of DutyScope.
- Legal Disclaimers — Important limitations on the Service’s scope.