1. Purpose.

This policy explains how Dealokr uses cookies, localStorage, sessionStorage, and similar trackers.

2. Strictly necessary storage.

Dealokr may use storage that is necessary to maintain a user session, secure authentication, remember language or certain preferences, remember the selected workspace, protect access to the client portal, prevent abuse, and maintain billing, security, and technical states. These elements are necessary for normal service operation. They are not used for targeted advertising.

3. Examples.

Examples include Supabase Auth session for login and security, dealokr:language for language preference, dealokr:selected-plan for plan selection before sign-up, workspace selection, client portal session, and server rate limits for abuse prevention.

4. Analytics and performance.

Dealokr uses Vercel Web Analytics and Speed Insights to measure technical audience, page performance, and service stability. These tools must remain configured without targeted advertising or cross-site tracking. If a tool goes beyond strict necessity or enables non-exempt tracking, Dealokr must show a consent mechanism before activation.

5. Trackers requiring consent.

Dealokr must not activate marketing, retargeting, advertising, social, or non-essential analytics trackers without clear information, a positive consent action, the ability to refuse as easily as to accept, and the ability to withdraw consent. Continuing to browse does not count as consent.

6. Managing preferences.

When non-essential trackers are used, Dealokr must provide an interface to accept, refuse, configure, and withdraw consent. Until that interface is enabled, Dealokr must limit usage to necessary or exempt elements.

7. Contact.

Questions may be sent to dealokr.support@gmail.com.