Cookie Notice

DMARCHub uses cookies only where strictly necessary to operate the service. We do not use advertising cookies, retargeting pixels, or third-party analytics that profile you.

What we set

• Session cookies (httpOnly, secure, sameSite=lax): set after sign-in to keep you signed in. Expire after a configurable session length.
• CSRF tokens: cryptographic tokens used to prevent cross-site request forgery on form submissions. Set per session.
• Invitation token cookies: set briefly during the team-invitation acceptance flow. Cleared on first sign-in after the invite is consumed.

What third parties may set

• Cloudflare may set security cookies (such as __cf_bm) on our behalf for bot management and TLS session resumption. These are essential to securing the service.
• Stripe Checkout sets cookies on its own domain (checkout.stripe.com) during payment. These are Stripe's, not ours; see Stripe's cookie policy.

Why we don't show a cookie banner

UK ICO guidance is that cookies which are strictly necessary to provide the service the user has requested do not require consent. Because DMARCHub uses only essential cookies, we do not present a consent banner. We will add one if we ever introduce non-essential cookies, before they are set.

Browser controls

You can refuse or delete cookies from your browser settings. Disabling essential cookies will prevent you from signing in to DMARCHub.