Legal

Cookie Policy

DomusOS uses cookies sparingly — only the ones we need to keep you signed in, remember your preferences, and protect form submissions. We don't run third-party advertising cookies or cross-site tracking pixels anywhere on our product.

Effective May 18, 2026

1What cookies are

Cookies are small text files a website asks your browser to store. We use them — and a couple of similar technologies like localStorage— only when there's no other way to deliver a feature.

2The full list

Here is every cookie set by a DomusOS-owned domain:

Name	Purpose	Category	Duration	Set by
`wos_session`	Keeps you signed in across page loads.	Strictly necessary	Session + 30 days	Our authentication provider
`wos_pkce`	PKCE flow token used during the OAuth handshake.	Strictly necessary	10 minutes	Our authentication provider
`domus_theme`	Remembers your chosen theme (Harbor / Atelier / Midnight).	Preference	1 year	DomusOS
`domus_mode`	Remembers light vs. dark vs. system mode.	Preference	1 year	DomusOS
`domus_density`	Remembers your UI density preference (cozy/comfortable/roomy).	Preference	1 year	DomusOS
`__Host-csrf`	Anti-CSRF token to protect form submissions.	Security	Session	DomusOS

3What we don't use

No third-party advertising cookies.
No cross-site tracking pixels (Meta Pixel, TikTok Pixel, etc.).
No session-replay tools (FullStory, LogRocket, etc.).
No fingerprinting libraries.

4Analytics

We use first-party, cookieless analytics to count page views and watch for performance regressions. These do not set any cookie and do not collect personally identifying information beyond a coarse country-level region.

5Your choices

Block all cookies.Most browsers let you disable cookies entirely. Doing so will sign you out and prevent you from signing back in — the “Strictly necessary” cookies above are required to keep a session.
Clear preference cookies. Clearing your browser cookies will reset your theme / density choices — you can re-pick them anytime under Settings → Appearance.
Do-Not-Track / Global Privacy Control. We honor GPC signals — when present, we treat them as an opt-out request under CCPA. We don't sell data regardless of GPC.

6Changes

If we add or change a cookie, we'll update the table above and bump the effective date at the top of this page. Material additions are also announced by email to all account holders 30 days in advance.

7Contact

Questions, requests, or complaints: privacy@domusos.io.

See also: Privacy Policy · Terms of Service