01
Cookies and browser storage
In short
A cookie is a small text file a website asks your browser to keep, which the browser sends back when you return. Browser storage (local storage and session storage) is similar, but it stays in your browser and isn’t sent to us on its own. Session storage empties when you close the tab.
Where the difference doesn’t matter, this page calls them all cookies.
02
Essential cookies
In short
| Cookie | What it does | How long it lasts |
|---|---|---|
| sb-…-auth-token | Keeps you signed in to your DreamTrak account on the website. Set only when you sign in. | Up to 400 days, or until you sign out |
| dt_consent | Remembers whether you allowed analytics, so the banner doesn’t ask again. | 12 months |
| dt-locale | Remembers the language you chose for the site. | 12 months |
| post_auth_next | Remembers which page to bring you back to after you sign in or sign up. | 10 to 30 minutes |
| dt_preview | Lets invited reviewers see the site before launch, after they enter a passphrase. Most visitors never receive it. | 30 days |
sb-…-auth-token
- What it does
- Keeps you signed in to your DreamTrak account on the website. Set only when you sign in.
- How long it lasts
- Up to 400 days, or until you sign out
dt_consent
- What it does
- Remembers whether you allowed analytics, so the banner doesn’t ask again.
- How long it lasts
- 12 months
dt-locale
- What it does
- Remembers the language you chose for the site.
- How long it lasts
- 12 months
post_auth_next
- What it does
- Remembers which page to bring you back to after you sign in or sign up.
- How long it lasts
- 10 to 30 minutes
dt_preview
- What it does
- Lets invited reviewers see the site before launch, after they enter a passphrase. Most visitors never receive it.
- How long it lasts
- 30 days
Sign-in is provided by Supabase, which runs our authentication. The sign-in cookie belongs to our own domain. These cookies don’t need your consent, because the site can’t work properly without them.
03
Referral cookies
In short
| Cookie | What it does | How long it lasts |
|---|---|---|
| dt_ref | Records that you opened an invite link, and whose, so the invite can be credited. | 30 days |
| ref_code | Holds the inviter’s code until you create an account. Page scripts can’t read it. | 30 days, or 30 minutes if set while you sign up |
dt_ref
- What it does
- Records that you opened an invite link, and whose, so the invite can be credited.
- How long it lasts
- 30 days
ref_code
- What it does
- Holds the inviter’s code until you create an account. Page scripts can’t read it.
- How long it lasts
- 30 days, or 30 minutes if set while you sign up
They’re set only when you open an invite link, such as a link to a Trak film that carries a code, or when you sign up with a code. Once your account is created, the code is attached to it and ref_code is cleared.
Opening an invite link also records the click, using a scrambled identifier that changes every day, so the invite can still be credited if you go on to sign up in the app. How referral credit works is set out in the Referral Program Terms.
04
Analytics, only with your yes
In short
When analytics is on, the site records which pages you view, the page you arrived from, and taps on a few key buttons such as download links. These events are stored in our own database, hosted by Supabase, and deleted automatically after 90 days.
| Item | What it does | How long it lasts |
|---|---|---|
| dt_session_id | A random ID in session storage that groups the pages from one visit. Created only after you allow analytics. | Until you close the tab |
dt_session_id
- What it does
- A random ID in session storage that groups the pages from one visit. Created only after you allow analytics.
- How long it lasts
- Until you close the tab
If you choose Essential only, or haven’t chosen yet, none of this happens.
05
Small things kept in your browser
In short
| Item | What it does | How long it lasts |
|---|---|---|
| dt_consent, dt-locale | Copies of your cookie and language choices, so the page can read them instantly. | Until you clear site data |
| pending_referral_code | A backup of an invite code, so it isn’t lost if the app opens before sign-up finishes. | Until you clear site data |
| dt_open_in_app_dismissed | Remembers that you closed the “Open in app” banner. | Keeps the banner away for 7 days |
| dreamtrak_tickets, dreamtrak_teema_tickets | Copies of support requests you sent from this browser, so you can find them again. | Until you clear site data |
| dt_blog_fp, dt_reaction_… | An anonymous ID and your reactions on blog posts, so you can react once per post without an account. | Until you clear site data |
| dt_tz_synced, ref_code | Session storage that notes your time zone was already sent this visit, and a copy of an invite code during sign-up. | Until you close the tab |
dt_consent, dt-locale
- What it does
- Copies of your cookie and language choices, so the page can read them instantly.
- How long it lasts
- Until you clear site data
pending_referral_code
- What it does
- A backup of an invite code, so it isn’t lost if the app opens before sign-up finishes.
- How long it lasts
- Until you clear site data
dt_open_in_app_dismissed
- What it does
- Remembers that you closed the “Open in app” banner.
- How long it lasts
- Keeps the banner away for 7 days
dreamtrak_tickets, dreamtrak_teema_tickets
- What it does
- Copies of support requests you sent from this browser, so you can find them again.
- How long it lasts
- Until you clear site data
dt_blog_fp, dt_reaction_…
- What it does
- An anonymous ID and your reactions on blog posts, so you can react once per post without an account.
- How long it lasts
- Until you clear site data
dt_tz_synced, ref_code
- What it does
- Session storage that notes your time zone was already sent this visit, and a copy of an invite code during sign-up.
- How long it lasts
- Until you close the tab
06
What we don’t use
In short
- No advertising or retargeting cookies, and no ad pixels.
- No third-party analytics scripts. The analytics described above is ours alone.
- No selling or sharing of anything these cookies record.
The companies that host our website and deliver its films and images, including Vercel and Cloudflare, handle each request so the page reaches you safely. They’re listed on our Subprocessors page. Advertising in the free mobile app is covered in our Privacy Policy.
07
Your choices
In short
When you first visit, a banner asks whether to allow analytics. You can change that choice here:
Your choice in this browser
Checking the choice saved in this browser.
You can also delete or block cookies in your browser’s settings. Blocking essential cookies will stop sign-in and some pages from working, and clearing site data resets your choices, so the banner will ask again.
08
Changes to this policy
In short
The date at the top of the page shows when this version took effect.
If we ever want to use cookies for something that needs your consent, such as a new kind of analytics, we’ll ask before it starts rather than assume your yes.
09
Questions
In short
- Privacy team
- Operator
- Soul Science LLC