Legal

Cookies

There is no banner on this site. This page is the reason, written out in full rather than asserted.

Last updated - August 27, 2026

Legal Privacy Policy Website Terms of Use

The short version

CapyDB sets no analytics cookies, no advertising cookies, and no cross-site tracking storage of any kind. There is no tag manager, no pixel, no session recorder, and no third-party analytics script on any page.

What remains is strictly necessary storage - keeping you signed in - and two preferences you set yourself: your language and your theme. Under the ePrivacy Directive, storage that is strictly necessary to deliver a service the user asked for, or that only records a choice the user just made, does not require prior consent. That is why you are reading a policy instead of dismissing a modal.

What these are

A cookie is a small file a site asks your browser to keep and send back on later requests. Local storage is a similar store the browser keeps but does not send automatically. Both are covered by the same rules, and both are listed below regardless of which mechanism is used.

What the site sets

The complete list. If your browser shows a CapyDB cookie that is not here, that is a bug in this page and we would like to hear about it.

__sessionStrictly necessary
Keeps you signed in to the dashboard. Set by our identity provider on our behalf; without it you would re-authenticate on every request.
Retention: 7 days
__client_uatStrictly necessary
Records the moment your session was last updated so the app can tell a signed-in visitor from a signed-out one before the page renders.
Retention: 7 days
__clerk_*Strictly necessary
Short-lived state for the sign-in, sign-up, and single-sign-on handshakes - the redirect state and the verification step.
Retention: Session to 7 days
NEXT_LOCALEPreference
Remembers the language you picked in the switcher, so it survives the next visit instead of losing to your browser's Accept-Language header.
Retention: 1 year
themePreference
Remembers whether you chose light or dark in the dashboard.
Retention: Persistent (local storage)

How to control them

Every browser can block or delete cookies for a site, and any of these can be removed at any time from your browser's site-data settings. Nothing on the marketing site depends on them.

Blocking the session storage breaks the dashboard, because the dashboard is a signed-in surface and there is no way to keep you signed in without it. Blocking the preference storage simply means the site forgets your language and theme between visits.

No tracking, and no signal to honour

We do not sell or share personal information for advertising, so there is nothing for a Global Privacy Control signal or a Do Not Track header to disable. We honour both anyway; on this site they change nothing because there was nothing to change.

Embedded content is kept off the marketing pages for the same reason: an embedded player or a hosted font would set third-party storage and would put a banner on this site.

If this changes

If we ever add analytics or any non-essential storage, we will publish a consent manager before the first such cookie is set, not after, and this page will list it. That is not a plan; it is a commitment about the order of operations.