Skip to content

Cookie policy

Last updated: August 28, 2026

What cookies we use

Denpex uses a minimal set of cookies. We never sell or rent cookie data, and we never share it with third-party advertisers. No analytics, advertising, marketing, or session-recording technology loads on page load. We load non-essential technologies only after you give prior, affirmative consent through our cookie banner.

Categories

  • Strictly necessary cookies. denpex_token . A JWT that authenticates you to the Denpex API. A same-origin server handler stores it with HttpOnly, Secure, SameSite=Lax and Path=/, so browser JavaScript cannot read the bearer. Authenticated browser requests pass through same-origin handlers that add the credential server-side. The session has a 24-hour idle limit and the signed JWT sets an absolute limit of at most 30 days. It cannot be turned off without breaking authentication.
  • Anonymous preview abuse prevention. __Host-denpex-anon-v1 is a random, server-signed receipt for the three-run anonymous diagnosis preview. It is Secure, HttpOnly, SameSite=Lax, host-only, and expires at the next UTC midnight. Denpex combines a keyed pseudonymous token derived from this receipt with a coarse browser family and primary language. The receipt is not used across UTC days, is not shared with third parties, and contains no account or customer identifier. Turning it off leaves only the IP and coarse-network abuse counters and can make the preview less consistent when your network changes.
  • Preference cookies. denpex_user . Your display name, plan, and avatar. Stored in localStorage. Not shared. We also store your cookie choice so we can honor it on future visits.
  • Analytics & marketing cookies (off by default). Denpex does not run a Meta/Facebook pixel, a TikTok pixel, or any session-recording tool. First-party activation measurement records only closed funnel stages and a temporary tab-scoped journey identifier. Google Analytics 4 measures page visits, navigation and closed conversion events such as signup and trial activation after analytics consent. It does not receive your submitted logs, email address, API keys or redemption codes through these events. URL query strings and fragments are excluded from our page and conversion events. Advertising personalization is off. Google Analytics user and event data is retained for 14 months without resetting that period on new activity; aggregate reports may remain available longer. If configured, product analytics such as PostHog or conversion measurement such as Google or LinkedIn loads only after your prior, affirmative opt-in in the cookie banner, and never before. Any such tool is configured not to record your keystrokes or form contents.

Your consent (including under CIPA)

Because nothing non-essential runs until you choose, no analytics or tracking technology processes your activity without your prior consent. To the extent any law, including the California Invasion of Privacy Act (CIPA) or the rules governing pen register and trap-and-trace devices, requires your consent before such technology may operate, that technology does not run unless and until you provide that consent by enabling the category in our banner. You can withdraw consent at any time using the controls below.

How to opt out

Click the "Customize" button on the cookie banner (or revisit denpex.com) to update your preferences. You can also clear cookies in your browser; the cookie banner will reappear on your next visit.

Questions

Email privacy@denpex.com with any questions about how Denpex uses cookies.