Last Updated: July 3, 2026. This policy explains what cookies we use and how they support your workspace settings.
We use essential session tokens to verify your login identity across browser tabs, maintain your dashboard workspace sessions under NextAuth, and process checkout payments securely. These cookies cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| dos.session-token | NextAuth session identifier (local development) | Session / until sign-out |
| __Secure-dos.session-token | Production NextAuth session identifier, shared across developerOS ecosystem subdomains for single sign-on | Session / until sign-out |
Both cookies are set with httpOnly and secure flags in production, meaning they can't be read by JavaScript and are only ever sent over encrypted connections.
We store local configuration details (like dark/light theme choices and draft text autosave logs in the Blog Post Editor) in your browser's local storage. This data is kept strictly client-side.
We record general telemetry (such as country code, browser type, and navigation logs) using lightweight analytics parameters. This tracking is aggregated anonymously to optimize loading speeds.
developerOS optionally integrates PostHog and Microsoft Clarity for product analytics and session-replay style diagnostics. These providers are environment-gated: their scripts only load, and their cookies are only set, on deployments where we've explicitly configured an active project key. If no key is configured for a given deployment, neither service loads and no third-party analytics cookies are set. Where active, these providers may set their own cookies to distinguish sessions and users; refer to PostHog's and Microsoft's respective privacy documentation for details on how they handle that data.
developerOS does not currently show a cookie-consent banner, since the only cookies we set by default are strictly necessary for authentication and checkout. You can view, block, or delete cookies at any time through your browser's settings — in most browsers this is under Settings → Privacy & Security → Cookies. Clearing your session cookie will sign you out; blocking it entirely will prevent you from logging in, since it's required for authentication to function.