Cookie notice
All legal pages · Terms · Privacy Policy · Acceptable Use · Cookies · DPA · Subprocessors · Report a security problem
Digital Minions uses only the cookies it needs to sign you in and keep you signed in safely. There are no advertising cookies, no analytics or tracking cookies, and no third-party cookies. Because none of these cookies is optional, there is no cookie banner. [Counsel: confirm that no consent banner is needed in the regions we serve, including EU West.]
Cookies the app sets
On a secure (https) address, each name starts with __Host-. That means the cookie works only on that exact address and only over https. Cookies marked HttpOnly can't be read by scripts on the page.
| Cookie | What it's for | How long it lasts |
|---|---|---|
dm_session | Keeps you signed in. It is signed, it is also checked against a session record on the server, and it ends when you sign out. HttpOnly. | Up to 30 days, or until 12 hours idle (owners can shorten both) |
dm_flash | Shows a one-line message ("Saved") after a page change. HttpOnly. | 60 seconds |
dm_oidc, dm_sso, dm_slack | Ties a "Sign in with Google, Microsoft, Slack or single sign-on" round trip to your browser, so nobody else can finish it. | 10 minutes |
dm_pk | Holds the one-time challenge while you use a passkey. | 5 minutes |
dm_hq | Hands you over from Minion HQ (for coaches and agencies) to a client workspace. | 5 minutes |
Digital Minions' own staff tools use dm_op, dm_op_pk, dm_op_pkb, dm_kd and dm_kdb. These are only for the operator console and key drop, never on a client's app.
Other things stored in your browser
- Local storage: your user number, so the app can clear its offline copy when someone else signs in on the same device; your recent pages in the command palette (⌘K); a list filter; and a "hide this sample note" choice. These never leave your device.
- Offline copy: the app keeps its own styles and scripts in a service-worker cache, so it loads faster.
Things that reach other companies
- Fonts: app pages load their typefaces from Google Fonts, so Google receives your IP address and browser details, as with any web request. It sets no cookies. [Engineering: serve the fonts ourselves, as the marketing site does.]
The marketing website
Our marketing website sets no cookies at all. It has no analytics, advertising pixels or third-party scripts. See its own privacy page.
Questions
Write to help@digitalminions.co.