Cookie Policy

Essential, always on

These keep the service working and can't be switched off, because without them you couldn't sign in or stay signed in.

• session: keeps you signed in. Set by our auth provider, HttpOnly, and expires in about two hours.
• csrf-token: protects sign-in and security steps from cross-site request forgery.
• dijin-locale: remembers the language you chose.
• PKCE verifier: a one-time value used to complete a secure sign-in. It lives in session storage and clears when you close the tab.

Preferences, saved on your device

These stay in your browser and are never sent to a server.

• dijin-theme: your light or dark mode choice.
• dijin-cookie-consent: the choice you make on this page, so we don't ask again.

Analytics, off until you allow it

We don't measure usage until you opt in from the cookie banner. Even then, none of these tools can see your memory content.

• Google Analytics: runs only if you turn analytics on. It records page views and basic events.
• Vercel Analytics and Speed Insights: collect page-load timing and aggregate traffic so we can keep the site fast. They see page paths and performance, not your content.

Bot protection

On the sign-in, sign-up, and password-reset pages we use Cloudflare Turnstile to block automated abuse. It can see your IP address and browser to tell humans from bots, and nothing about your memory.

Payments

If you upgrade on the web, our payment processor Paddle sets its own cookies during checkout to run the transaction. Dijin never sees or stores your card details.

Managing your choices

Open cookie settings any time from the banner or the footer. You can turn analytics on or off; essential cookies stay on because the service needs them. Clearing your browser storage removes your saved preferences, but loses nothing else.

How long, and where to read more

Session cookies expire in about two hours, and preferences stay until you clear them. Analytics retention follows each provider's policy. For the full picture of how we handle your data, see the Privacy Policy, and for who can access what, the sub-processors list.