Cookies and privacy choices

Necessary storage

The session cookie keeps your account signed in for up to seven days. The donehat_audit_owner cookie lets the same browser recover a submitted audit for up to seven days. These HTTP-only cookies cannot be read by page scripts. Blocking them can prevent sign-in or audit recovery.

Preferences and work in progress

Local storage remembers your chosen language and theme, a sign-in status marker, workspace selections and a pending audit reference. These entries can remain until replaced or cleared in your browser. They are not your password. Privacy choices are remembered for 180 days on this browser, then requested again. Clearing storage or using another browser can reset them.

Optional analytics

Optional product events and referral tracking stay off until you choose Allow analytics. When enabled and configured, PostHog may use ph_ cookies and local storage for analytics, with a 180-day cookie setting. Session recording and automatic form capture are disabled. Referral data stays in local storage until cleared or replaced; turning analytics off removes our stored referral data and stops new optional events.

On donehat.com, allowing analytics also loads Google Analytics, which sets _ga and _ga_ cookies for 180 days to count visits and pages. Page addresses are sent without query strings, identifiers in addresses are masked, and account-recovery pages are never sent. Advertising features and Google signals are off. Turning analytics off stops Google Analytics and deletes its cookies.

External services and controls

Opening a hosted checkout or an external service may involve that provider’s storage and privacy controls. Your DoneHat choice does not change choices on those other services. You can change the setting below or clear site data through your browser. Declining optional analytics does not prevent you from using audits or your account. Security logs and essential transaction records are separate from optional browser analytics.