Cookie Notice
Dark Orb sets at most two cookies, and each is strictly necessary to a service you have asked for: a session cookie when you are signed in, and a demo_session cookie if you try the composer without an account. We set no analytics cookies, no advertising cookies, and no third-party tracking cookies. Because both cookies are strictly necessary, we do not show a cookie consent banner: the Privacy and Electronic Communications Regulations (PECR) do not require consent for a cookie that is essential to a service you have asked for.
The cookies we set
| Name | Purpose | Stored | Expiry |
|---|---|---|---|
session | Keeps you signed in across pages so you do not re-authenticate on every request | Your user identifier, your email, and an expiry timestamp | 30 days |
demo_session | Set only if you try the composer without an account, so your trial composition survives between requests and you can revise it | A single random session identifier, no personal data | 24 hours, refreshed on activity |
The session cookie is marked HttpOnly (it cannot be read by scripts in the page), SameSite=Lax, and is sent only over HTTPS in production. It is signed, so it cannot be tampered with. It is set when you sign in and cleared when you sign out. The demo_session cookie is marked HttpOnly, SameSite=Strict, and Secure. It is set when you first compose without an account, and is cleared when you claim that trial into an account. These are the only cookies Dark Orb sets.
What we do not use
- No analytics cookies. Our analytics are server-side, cookieless, and first-party, and we do not assign persistent visitor identifiers.
- No advertising or marketing cookies.
- No third-party tracking cookies, social-media pixels, or tag managers.
- No consent banner, because both cookies we set are strictly necessary and exempt from the PECR consent requirement.
Sites you build with Dark Orb
The websites you compose and publish with Dark Orb are served as static pages and do not set cookies by default. If you add functionality to your site that sets its own cookies in future, that is your responsibility as the controller of your site. The Output System does not inject tracking cookies into your published sites.
Changes to this notice
If we ever introduce a non-essential cookie, we will update this notice and, where the law requires it, ask for your consent before that cookie is set. See also our Privacy Policy and Subprocessors list.
← Back