Updated April 2026
1. What Cookies We Use
- Strictly necessary: session cookies, CSRF tokens, and the HttpOnly JWT cookie that keeps you signed in. Cannot be disabled without breaking the service.
- Preferences: locale (EN/VI), UI theme. Persist across sessions.
- Analytics: aggregated usage metrics to improve reliability. Only set after consent where consent is legally required.
2. Third-Party Cookies
Google may set cookies during OAuth sign-in, governed by Google's policies. SePay may set cookies on its payment pages during checkout.
3. Managing Preferences
You can clear or block cookies in your browser settings. Disabling strictly necessary cookies will prevent sign-in and use of the dashboard.
4. Do Not Track
We honor Global Privacy Control (GPC) signals for non-essential cookies.
5. Changes
Updates will be reflected on this page. Contact legal@dmslab.ai for questions.