Dalang.io uses a small number of cookies and similar browser-storage technologies to keep you logged in, remember your language preference, and operate the site. This page lists every cookie we set, what each one is for, and how to manage them.
1. What Are Cookies?
Cookies are small text files stored by your browser when you visit a website. They let sites remember preferences, keep you logged in, and operate features that span multiple page loads.
2. Types of Cookies We Use
- Essential cookies — required for the site to function (authentication, CSRF protection, secure form submissions). You cannot opt out of these without losing the ability to log in.
- Functional cookies — remember preferences such as language. Disabling these means we can't remember your settings between visits.
- Performance cookies — help us understand how visitors use the site so we can improve it. Anonymous and aggregated where possible.
- Targeting cookies — Dalang.io does not currently set targeting cookies. If that changes we will update this policy and the consent banner.
3. The Specific Cookies We Set
The current inventory of first-party cookies on dalang.io:
| Cookie | Type | Purpose | Expiry |
|---|---|---|---|
| auth_token | Essential | Stores your authenticated session JWT after login. HttpOnly, Secure. | 7 days |
| auth_redirect | Essential | Carries the post-login destination through the OAuth redirect flow. | 10 minutes |
| lang | Functional | Remembers your selected interface language (en / id / zh). | 1 year |
| referral_code | Functional | Legacy referral attribution (no longer set on new sessions). | Session |
4. How We Use Cookies
- Recognise you when you return to the site (so you don't have to log in repeatedly).
- Provide a secure session-bound experience (HttpOnly + Secure flags on auth cookies prevent script access).
- Track basic, anonymised usage so we can improve site performance.
- Persist UI preferences such as language.
5. Managing Your Cookie Preferences
- Browser settings — every modern browser lets you block or delete cookies per site. Removing essential cookies will log you out.
- Account closure — if you close your account, we delete the auth cookies on logout.
- Disabling cookies may affect site functionality, particularly anything behind login.
6. Third-Party Cookies
We work with infrastructure providers that may set their own cookies on your device when you visit dalang.io:
- Cloudflare — bot protection and CDN session cookies (e.g.,
__cf_bm). Governed by Cloudflare's cookie policy. - Xendit — only set when you reach the payment page; required for the secure checkout flow.
Dalang.io does not currently set advertising or marketing-attribution cookies. We will update this page if that changes.
7. Updates to This Policy
We may update this Cookie Policy as we add or remove cookies, change providers, or react to legal changes. The effective and last-reviewed dates at the top of this page reflect the current version.
8. Contact
Questions about cookies or browser-storage practices? Email [email protected].
Questions about this document? Email [email protected].
For the legal entity that contracts with you, see Legal & Procurement.