Cookie Policy
Last updated: 14 September 2026
What we actually use
| Name | Type | Purpose | Duration |
|---|---|---|---|
devcut_oauth |
Strictly necessary — first-party, HttpOnly cookie | Binds a GitHub sign-in attempt to your browser, so an attacker can't trick you into accepting a session they initiated (CSRF protection for the OAuth flow). Set only during sign-in, on the /v1/auth/github path. |
10 minutes, or until the sign-in completes |
devcut_token / devcut_uid |
Strictly necessary — localStorage, not a cookie |
Keeps you signed in to the web dashboard between visits. Not sent automatically with every request the way a cookie is; read explicitly by our own page scripts. | Until you sign out, or clear site data |
What we don't use
- No analytics cookies or SDKs (Google Analytics, Plausible, etc.)
- No advertising/retargeting cookies or pixels on the site itself
- No third-party embeds, chat widgets, or social-share scripts
The extension itself doesn't use cookies at all — it talks to our backend over plain HTTPS API calls, authenticated with the same session token.
Managing storage yourself
You can clear localStorage for devcut.co.in at any time from your browser's site settings, which will sign you out of the dashboard. Since we set no non-essential cookies, there is nothing else to opt out of. If you'd still like the devcut_oauth cookie blocked, most browsers let you block third-party or all cookies per-site — note this will break GitHub sign-in specifically (invite-code sign-in is unaffected).
Changes
If we ever introduce analytics or advertising technology, we will update this page first and add a genuine accept/reject consent control before anything non-essential loads — not a bundled or pre-checked "accept all."
Contact
Email: techsupport@devcut.co.in