Legal
Cookie Policy
This Cookie Policy explains the cookies and similar browser storage currently used by Dashio.
Current Use
Dashio uses necessary cookies for authentication, protected-route redirects, security, abuse prevention, and payment fraud prevention. One optional first-party preference cookie can remember your selected Space. Website analytics use cookieless first-party Umami and do not depend on an analytics cookie.
You can change the optional preference-cookie choice at any time in Cookie Settings .
Necessary Cookies
These cookies are required for requested service functionality or security. Some provider-managed cookies are only created when the relevant protection or checkout flow is used.
| Name | Provider | Purpose | Expiration | Type |
|---|---|---|---|---|
| cookieConsent | Dashio | Records that you made a cookie choice so the banner does not reappear on every page. | 1 year | First-party HTTP cookie |
| preferenceCookies | Dashio | Stores whether the optional selected-Space preference cookie is enabled. | 1 year | First-party HTTP cookie |
| resend-throttle | Dashio | Stores resend cooldown counters and timestamps for sign-up and email-change messages to limit repeated sends. | 30 days | First-party HTTP cookie |
| sb-dashio-auth-token* | Supabase | Stores the authenticated session for server-side rendering. Large sessions can be split into numbered cookie chunks such as .0 and .1. | Up to 8 hours per write; refreshed as required by the session | First-party HTTP cookie |
| sb-dashio-auth-token-redirect-path | Supabase | Preserves the protected page requested before sign-in so Dashio can return you to it after authentication. | Temporary | First-party HTTP cookie |
| __cf_bm | Cloudflare | Used when Cloudflare bot protection is active to distinguish legitimate traffic from automated abuse. | 30 minutes after inactivity | Security cookie |
| cf_clearance | Cloudflare | Stores proof that a Cloudflare challenge was passed when a challenge or JavaScript detection requires clearance. | Configured challenge-passage duration | Security cookie |
| __stripe_mid | Stripe | Fraud-prevention signal used when Stripe.js is loaded to start a checkout. | 1 year | Payment-security cookie |
| __stripe_sid | Stripe | Short-lived fraud-prevention signal used during checkout. | 30 minutes | Payment-security cookie |
| m | Stripe | Fraud-prevention identifier used by Stripe to assess transaction risk. | Up to 2 years | Payment-security cookie |
Preference Cookies
Preference cookies are optional and are only persisted after you allow them in the cookie banner or settings page.
| Name | Provider | Purpose | Expiration |
|---|---|---|---|
| currentSpaceSlug | Dashio | Remembers the Space selected in the customer portal so the same context can be restored on later page loads. | Browser session |
Similar Browser Storage
Dashio also uses browser storage where a cookie is not appropriate:
dashio.pendingInviteTokenin local storage temporarily preserves a Space invitation token until it is accepted or cleared.dashio:signature-selection:v1:*in session storage preserves browser-tab-only email-signature form selections through reloads and is removed with the browser tab/session or when explicitly cleared.
Legal Basis and Control
Necessary cookies and equivalent security technologies are used to provide requested functionality, protect accounts and services, and prevent fraud or abuse. Depending on the processing purpose, the legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR together with § 25(2) TDDDG where applicable.
The optional currentSpaceSlug preference cookie is stored only after your choice and can be disabled at any time through Cookie Settings . The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Contact Us
If you have questions about this Cookie Policy, contact us at compliance@dashio.net.
Last updated: 04.10.2026