Loading…
Last Updated: October 21, 2026. This policy explains what cookies we use and how they support your workspace settings.
We use essential session tokens to verify your login identity across browser tabs, maintain your dashboard workspace sessions under NextAuth, and process checkout payments securely. These cookies cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| dos.session-token | NextAuth session identifier (local development) | Session / until sign-out |
| __Secure-dos.session-token | Production NextAuth session identifier, shared across developerOS ecosystem subdomains for single sign-on | Session / until sign-out |
Both cookies are set with httpOnly and secure flags in production, meaning they can't be read by JavaScript and are only ever sent over encrypted connections.
We store local configuration details (like dark/light theme choices and draft text autosave logs in the Blog Post Editor) in your browser's local storage. This data is kept strictly client-side.
We measure page views and product events with Google Analytics, which sets its own cookies (such as _ga) to tell visits apart, and with Vercel Analytics, which does not set cookies. We use this to see which pages are used and to fix what breaks.
developerOS optionally integrates PostHog and Microsoft Clarity for product analytics and session-replay style diagnostics. These providers are environment-gated: their scripts only load, and their cookies are only set, on deployments where we've explicitly configured an active project key. If no key is configured for a given deployment, neither service loads and no third-party analytics cookies are set. Where active, these providers may set their own cookies to distinguish sessions and users; refer to PostHog's and Microsoft's respective privacy documentation for details on how they handle that data.
developerOS does not currently show a cookie-consent banner. Besides the cookies needed for sign-in and checkout, Google Analytics cookies are set when you visit our sites. You can view, block, or delete cookies at any time through your browser's settings — in most browsers this is under Settings → Privacy & Security → Cookies. Clearing your session cookie will sign you out; blocking it entirely will prevent you from logging in, since it's required for authentication to function.