Cookies
Cookie Policy
Last updated: 19 October 2026
1. What we store in your browser
| What | Purpose | Needed? |
|---|---|---|
| Sign-in cookie (HttpOnly) | Keeps you signed in. It can't be read by scripts on the page, and can be revoked when you sign out. | Yes — the app can't work without it |
| “Trusted browser” cookie (HttpOnly) | Only if you tick “don't ask for a code on this browser” when signing in. It lets us skip the emailed code on that browser for 30 days. It's scoped to the sign-in endpoints, can't be read by scripts, and is removed when you revoke the browser or change your password. | No — without it you'll just enter a code at each password sign-in |
| Google sign-in check cookie (HttpOnly) | A random value set for up to 10 minutes while you sign in with Google, to make sure the sign-in you finish is the one you started. | Yes, when you use Google sign-in |
| Session hints in browser storage | Your role, your business ID and when you were last active, so the app can time out an idle session. | Yes |
| Preferences in browser storage | Light/dark theme, whether the sidebar is collapsed, pinned pages, your language choice, the branch you're working in (Retailer OS), and whether you've seen the guided tour. | No — the app works without them |
| Saved calculator numbers (this website) | Remembers the numbers you typed into the “Your numbers” calculator so they're still there when you return. They stay in your browser and aren't sent to us. | No |
| Cached screens and an offline queue | Lets a screen show instantly, and holds actions taken while you're offline until you're back online. | No |
| Website measurement ids (this website) | Two random values in browser storage, not cookies: a visitor id (kept 180 days, then replaced) and a session id (replaced after 30 minutes of inactivity). They let us count visits, see which pages and sections are read, which buttons are used and whether the waitlist form was completed. They are random — no name, email, phone, IP address or device fingerprint is attached — and the data goes only to our own servers, never to an advertising or analytics company. Deleted on our side after 180 days. | No — see “Your choices” |
Your access token is kept in the page's memory only — never in browser storage — so it disappears when you close the tab.
2. What we don't do
- No advertising or tracking cookies.
- No third-party analytics or marketing tags on this website — measurement is first-party and stays on our servers.
- No recording of what you type into forms: the waitlist form reports only that it was opened, started and submitted.
- No fingerprinting: measurement ids are random and are never combined with your IP address or device details to identify you.
- No selling or sharing of browsing data.
3. Your choices
You can clear cookies and site storage in your browser at any time; you'll simply be signed out and lose the saved preferences. Blocking the sign-in cookie will stop you signing in. Website measurement respects the Global Privacy Control and “Do Not Track” browser settings — turn either on and nothing is measured. If a visit arrived from a campaign link, the campaign tags in that link (utm parameters) are kept with the visit so we know which campaigns bring people here; nothing else from the address is kept.
4. Changes
If we change what we store, we'll update this page and its date.
Questions? Write to info@distiqoai.com or message us on WhatsApp. See also our Privacy Policy, Terms and Security pages.