Legal
Cookies & browser storage
Every cookie and browser-storage key Dealbeam sets, by name, with what it is for and how long it lasts. No advertising cookies, no third-party trackers.
Effective 2026-09-15
Strictly necessary
Required for the service you asked for: signing in, staying signed in, opening a password-protected page. These do not need consent.
| Name | Type | Where | Purpose | Lifetime |
|---|---|---|---|---|
| authjs.session-token (or __Secure-authjs.session-token) | Cookie | App (signed-in) | Keeps you signed in. Holds a signed session token with your user id, team and plan. | 30 days, or until you sign out |
| authjs.csrf-token, authjs.callback-url | Cookie | All | Protects sign-in forms against cross-site request forgery and returns you to the page you came from. Set by the sign-in library on first load; contains a random token, nothing about you. | Session |
| page_auth_{pageId} | Cookie | Buyer page (/p/…) | Remembers that you entered the correct password for a protected page. Contains a signed page token, nothing about you. | 24 hours |
Functional
Remember a choice you made (theme, view, an answer to a prompt). They contain no identifier and are never sent to us.
| Name | Type | Where | Purpose | Lifetime |
|---|---|---|---|---|
| db_privacy_notice_{pageId} | Browser storage | Buyer page (/p/…) | Remembers that you dismissed the reading notice on a page. | Until you clear site data |
| db_replay_consent_{pageId} | Browser storage | Buyer page (/p/…) | Your answer to the session-replay request (allowed or declined) on a page that has replay switched on. | Until you clear site data |
| mk-theme | Browser storage | Marketing site | Your light/dark choice for the website. | Until you clear site data |
| db-ds-theme, dashboard-view, deals-view, dashboard-activity, dashboard-activity-seen, dealbeam-tour-completed | Browser storage | App (signed-in) | Interface preferences: theme, card or list view, whether the activity drawer is open, whether you finished the product tour. | Until you clear site data |
Reading analytics
Used only on pages a seller shares with you, so the seller can see that the page was read and by whom. There are no advertising cookies and no third-party trackers anywhere on Dealbeam.
| Name | Type | Where | Purpose | Lifetime |
|---|---|---|---|---|
| db_ref_{pageId} | Cookie | Buyer page (/p/…) | Set when you open a personal link sent to you, or pass an email gate. Lets the sender see that it was you who read the page. | 30 days |
| db_visitor_id | Browser storage | Buyer page (/p/…) | A random identifier generated in your browser so the sender can tell a return visit from a new one. It is hashed together with the page id before it is stored, so the same browser looks different on every page. | Until you clear site data |
Third-party content
The website and app load no third-party scripts, fonts or images. Published deal pages load the fonts the seller chose from Google Fonts, and may contain embeds (YouTube in privacy-enhanced mode, Vimeo, Loom, Google Docs, Airtable, Calendly) that set their own cookies under their own policies once they load.
How to control this
- Clear or block cookies and site data in your browser settings. The app will sign you out and forget your preferences; deal pages will treat you as a new reader.
- Switch on Global Privacy Control in a supporting browser or extension; deal pages then never ask about session replay.
- On a deal page, choose "No thanks" when asked about replay. Your answer is stored only in your browser and can be reset by clearing site data.
Changes
This list is generated from the same source the software uses, so it changes only when the software does. The effective date above marks the last change.