Last updated: 2026-10-08
Last updated: October 8, 2026
This Cookie Policy explains the small files DTPulse stores in your browser when you use dtpulse.com. It complements the Privacy Policy.
DTPulse sets two kinds of cookies. Essential and functional ones keep you signed in and remember your preferences. Analytics and advertising ones help us understand which of our channels bring visitors, and they are loaded only if you click Accept in the cookie banner. If you choose Essential only, nothing from section 3 is loaded. The lists below are exhaustive.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
__Secure-authjs.session-token (HTTPS) / authjs.session-token (HTTP) | Authentication: keeps you signed in. Set after login, cleared on sign-out. | Strictly necessary | 30 days (sliding) |
authjs.csrf-token | CSRF protection for sign-in and form submissions. | Strictly necessary | Session |
authjs.callback-url | Stores the page to return to after sign-in. | Strictly necessary | Session |
cookieConsent | Remembers your choice in the cookie banner. | Strictly necessary | 1 year |
locale | Remembers the language you chose in the language switcher. | Functional | 1 year |
theme | Remembers light / dark / system theme preference. | Functional | 1 year |
dtp_ref | Referral code of the sales partner whose link you followed, so the partner is credited if your company signs up. Set only when you arrive through such a link. | Functional | 90 days |
All cookies in this section are first-party (set by dtpulse.com) and use HttpOnly and Secure flags where appropriate.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 | Counting visits and which pages are used | 13 months |
_gcl_* | Google Ads | Measuring which ads lead to sign-ups | 90 days |
_rdt_uuid | Reddit Ads | Measuring which Reddit ads lead to sign-ups | 90 days |
dtp_src | DTPulse | The first campaign, ad or website that brought you to us. Stored with your company when it signs up, so we know which channels work | 90 days |
We use this data only to evaluate our own marketing and never sell it. If you sign up without accepting these cookies, we still record the campaign tags (for example utm_source) of the visit in which you signed up, together with your company's account. Nothing is stored on your device for that.
We never use Mixpanel, PostHog, Amplitude, Segment, Facebook Pixel, LinkedIn Insight Tag, fingerprinting or session-replay tools.
If your admin connects an integration (Slack, Google SSO, Microsoft Teams), the third party may set its own cookies on its own domain when you authenticate there. Those cookies are governed by the third party's privacy and cookie policies, not by us.
When you reach the billing/checkout page hosted by Stripe, Stripe sets its own cookies for fraud prevention and session management. See https://stripe.com/cookies-policy/legal.
Besides cookies, the application uses your browser's localStorage to cache non-sensitive data (e.g. recently viewed employees, holiday lists, department trees) so the UI stays fast. This data stays on your device, is never sent to any third party, and you can clear it at any time from your browser settings.
You can change your choice at any time: click Manage cookies in the footer. If you withdraw consent, we delete the cookies listed in section 3 and reload the page.
Your browser also lets you block or delete cookies through its settings. If you block the cookies marked strictly necessary, you will not be able to sign in. Blocking the functional cookies will simply reset your language and theme preferences each visit.
Helpful pages from major browsers:
We will update this page if we add or remove cookies. Material changes are announced in the same way as Privacy Policy updates.
Questions about cookies? Email [email protected].