Cookie & Storage Policy

Last Updated: 3 October 2026

This policy describes cookies and browser storage categories that DexURL actually uses today. It does not invent cookie names, expirations, or vendors beyond what the app and its signed-in providers require.

1. Tracking Cookie Status

DexURL currently does not use advertising, marketing, or cross-site tracking cookies or storage, and therefore does not currently present a marketing-cookie consent UI.

DexURL's own analytics are cookieless: Cloudflare Web Analytics and a first-party counter for landing-page clicks set no cookies and store nothing in your browser. If DexURL later introduces non-essential analytics or marketing storage, that change requires a separate consent review before launch.

2. Functional Browser Storage

DexURL and its required providers may use cookies or local browser storage for:

• Authentication / session: Session and related sign-in storage is managed by our auth provider (Clerk) so you can stay signed in across pages. Exact cookie names and lifetimes are controlled by that provider’s configuration for DexURL.
• Appearance preference: Light/dark theme preference under the theme key in localStorage.
• User-requested QR logo drafts: Optionally saved cropped QR logos under dexurl.savedQrLogos.v1 in localStorage (capped locally in the browser).
• Bot protection (Turnstile): When abuse reporting enables Cloudflare Turnstile, the Turnstile widget may use provider cookies/storage needed to complete the challenge in the browser. DexURL verifies the submitted token server-side and stores only whether verification succeeded — not the raw token. DexURL does not use Turnstile for advertising.
• Interface state: Sidebar and tour progress, editor drafts, and a support-case access key for tickets opened without an account are kept in localStorage on your device.
• Embeds on Bio pages: If a Bio page owner adds an embed (YouTube, Vimeo, Spotify, SoundCloud, Google Maps), that provider loads when the embed scrolls into view and may set its own cookies or storage. DexURL does not control or receive them.
• QR location preview: The free QR tool loads map tiles from OpenStreetMap only after you click Show map.
• Payments (Stripe): Checkout and Customer Portal flows are provided by Stripe. Stripe may set cookies on Stripe-hosted surfaces; DexURL does not use Stripe cookies for advertising on DexURL pages.

3. Account-backed data (not browser cookies)

Vault items, links, link pages, and similar product data are stored in your DexURL account (application database). Live Vault contents are not end-to-end encrypted. Optional encrypted .dexvault backups are created locally in your browser; DexURL does not receive that backup password. Restore a backup with Import bookmarks, the .dexvault file, and the same password.

4. Managing Local Data

Clearing browser cache or site data may delete locally stored preferences, local auth preview state, and saved QR logo drafts. Account-backed vault items and links remain available after you sign in again.

5. Future non-essential storage

Non-essential analytics, marketing, or cross-site tracking storage is out of scope today. Introducing it later requires an explicit product decision and a separate consent review.

Contact & Support

support@dexurl.com. Or use the Support Centre.

Operator: DexURL, Malaysia.