Cookie Policy

Cookie Policy.

Effective April 2, 2026

duly uses a minimal set of cookies and local storage to operate the platform. We do not use advertising cookies, tracking cookies, or third-party cookies.

Cookies

duly_auth_session

Strictly necessary

Keeps you signed in. This cookie is HttpOnly, Secure (in production), and SameSite: Lax. It does not track you across other websites.

12 hours

duly_csrf_token

Strictly necessary

Protects against cross-site request forgery attacks. Required for all state-changing requests. SameSite: Strict.

7 days

Local Storage

dulystores the following preferences in your browser's local storage. These are not cookies and are never sent to our servers.

Theme preference

Remembers your light or dark mode choice.

Sidebar state

Remembers whether your dashboard sidebar is collapsed or expanded.

Third-Party Cookies

duly uses Google Tag Manager for anonymous analytics. Depending on the analytics configuration, Google may set cookies (such as _ga or _gid) to measure site usage. These are first-party analytics cookies, not advertising or cross-site tracking cookies. You can block these with any standard ad blocker or the Google Analytics opt-out browser extension.

Managing Cookies

You can clear cookies through your browser settings at any time. Note that clearing the session cookie will sign you out. Clearing local storage will reset your theme and sidebar preferences.

The cookies set by duly (authentication and CSRF) are strictly necessary for the platform to function. Google Tag Manager may set additional analytics cookies which are not required for core functionality. You can block analytics cookies using a browser ad blocker without affecting your ability to use duly.

Contact

If you have questions about our use of cookies, contact us at hello@duly.finance.