Legal
Cookie Policy
Last updated July 22, 2026
Every cookie Dune Sale sets, why it exists, how long it lasts, and how to manage them.
Section 01
What is a cookie
In plain English
A small text file websites store on your device to remember settings, keep you logged in, or measure usage.
A cookie is a small text file that a website places on your device. It is used to remember preferences, keep sessions active, and, in some cases, track visits across sites for advertising purposes. This policy describes the cookies Dune Sale uses.
Section 02
Essential cookies
In plain English
Session and CSRF tokens so you stay logged in and safe. Can't be turned off — the app doesn't work without them.
The following cookies are strictly necessary and are set on every visit:
| Name | Purpose | Duration |
|---|---|---|
| sb-access-token | Authenticated session | 1 hour, rotating |
| sb-refresh-token | Silent session renewal | 7 days |
| __csrf | Cross-site request forgery protection | Session |
Section 03
Attribution cookies
In plain English
When a visitor clicks a partner's /r/ link, we set a short-lived cookie so the conversion goes to the right partner.
When someone clicks a partner tracking link (URLs beginning with partner.dunesale.com/r/), we set a single cookie containing an anonymized click identifier. This cookie is used solely to attribute any resulting conversion back to the promoting partner.
| Name | Purpose | Duration |
|---|---|---|
| ds_click | Click attribution | 30 days (varies by brand) |
Section 04
Analytics
In plain English
We use PostHog to understand how people use the site. Cookies are only set after you accept them in the banner. Reject and nothing gets stored.
Dune Sale uses PostHog (PostHog Inc., hosted in the EU) to measure aggregate site usage — which pages get visited, referrer sources, and general funnel performance. This helps us decide what to improve.
| Name | Purpose | Duration |
|---|---|---|
| ph_* | PostHog session and event tracking | 1 year |
These cookies are only set after you click Accept analytics in the cookie banner. If you click Essential only or dismiss the banner, no PostHog cookies are set, and no PostHog scripts are loaded.
Section 05
Third-party cookies
In plain English
When you click through to a brand's site, that site can set its own cookies. That's between you and them — we don't control it.
Once a partner tracking link redirects a visitor to a brand’s destination site, the destination site may set its own cookies. Those cookies are governed by the destination site’s policy, not Dune Sale’s.
Section 06
Managing cookies
In plain English
Your browser has cookie settings. Blocking everything will break the app. Blocking third-party cookies is fine.
Most browsers allow you to manage cookies via their settings menu. You can typically:
- See what cookies are stored and delete them
- Block third-party cookies globally
- Block all cookies (this will prevent you from logging in to Dune Sale)
- Set cookies to expire when you close the browser