Cookie Policy

This policy explains how DonePages uses cookies and similar browser technologies on donepages.com and in the application. It supplements our Privacy Policy.

Cookies are small text values stored by your browser and returned to a site on later requests. Local storage keeps information in the browser but does not automatically send it with every request. We also use pseudonymous server-side records associated with referral or usage events.

• Authentication and security. Supabase session and OAuth-verifier cookies keep you signed in, complete Google sign-in, refresh sessions, and protect the authentication flow. They expire with the session or authentication period and may be renewed while you use the Service.
• Active workspace. pp_workspace remembers the workspace you selected. It is used by the dashboard and lasts up to 30 days.
• Signup preferences. dp_signup_plan and dp_signup_interval preserve the plan and billing interval you selected while you complete an external sign-in. They last up to 24 hours.
• Affiliate attribution. dp_affiliate_ref is a first-party, HTTP-only token set after you follow an approved DonePages partner link. It is used solely to connect a later eligible signup to that partner, prevent abuse, and calculate commissions. It expires after 60 days or is removed after attribution. It is not used for advertising or cross-site profiling.
• Interface state and drafts. Local storage may remember that you completed or dismissed an in-app guide and may preserve an unsaved editor draft on your device.

Checkout, subscription management, and affiliate payout onboarding open Stripe-hosted pages. Stripe may use its own cookies and device signals to process payments, verify identity, prevent fraud, and secure those pages under Stripe's policies. Google may likewise use its own technologies on Google-hosted sign-in pages. DonePages does not control cookies placed on those providers' separate domains.

DonePages does not embed third-party advertising pixels, use cookies for cross-context behavioral advertising, or sell cookie-derived personal information. Product and public-page events are measured with DonePages' own systems and pseudonymous identifiers.

You can inspect, block, or delete cookies and local storage through your browser settings. Blocking authentication or workspace cookies will prevent sign-in or dashboard features from working. Clearing the affiliate cookie before signup prevents cookie-based referral credit. Public DonePages remain viewable without signing in. Where applicable law requires a different choice mechanism, you may contact us to exercise it.

We may update this policy when our technology or legal obligations change. We will update the date above when we do. Questions can be sent to [email protected].