Legal
Privacy & cookie policy
How this website handles your data — kept deliberately short and plain.
Last updated: July 28, 2026
Who we are
This website (deckgauge.com) is operated by CodPal, the maintainers of the open-source Deckgauge project. For any privacy question, email [email protected].
This policy covers the marketing website only. The Deckgauge application itself is open-source software you run on your own infrastructure — we never receive data from your self-hosted instance.
What we collect, and why
We use Google Analytics 4 (loaded through Google Tag Manager) to understand aggregate, anonymous usage: which pages are visited, rough geographic region, referring site, device type, and similar. IP addresses are anonymized. We use this solely to improve the site. We do not sell your data, build advertising profiles, or track you across other websites.
We also use Microsoft Clarity (also loaded through Google Tag Manager) for anonymized product analytics — aggregate heatmaps and session insights that show how visitors move through pages, so we can fix confusing UX. Clarity masks text content by default and does not capture what you type into form fields. Like GA4, it is bound to the same Analytics consent category and only runs once you accept.
We apply Google Consent Mode v2 with region-aware defaults:
- In the EEA, the UK, and Switzerland, analytics is off by default — no analytics cookie is set and no measurement occurs until you click Accept on the cookie banner.
- Elsewhere, analytics runs by default, and you can turn it off at any time by choosing Reject on the banner or via Cookie preferences.
Advertising storage is always denied — this site runs no ads.
The demo request form
If you ask for access to the hosted demo at deckgauge.com/try, we collect the name, company and email address you type, together with the two-letter country your request arrives from and the page that referred you. We store the exact wording of the consent you agreed to alongside the record, so it is always clear what you said yes to. We do not store your IP address.
We use it for one thing: to contact you by email about Deckgauge. We do not sell it, share it with anyone outside CodPal, add it to an advertising audience, or use it to build a profile. It is held in a Cloudflare D1 database in the EU, for as long as we are still in touch about Deckgauge and no more than 24 months after your last submission, after which it is deleted. Ask us to delete it sooner and we will — see Your rights below, or just reply to any email from us.
Unlike the analytics above, this is not a cookie and there is nothing to opt into: it is only the information you chose to type into the form.
Legal basis (GDPR)
- Consent (Art. 6(1)(a)) for analytics cookies — you opt in, and can withdraw anytime.
- Legitimate interest / strictly necessary for the cookies that make the site work (remembering your theme and your cookie choice).
- Consent (Art. 6(1)(a)) for the demo request form — you tick the box, we record the wording you agreed to, and you can withdraw at any time by asking us to delete the record.
Cookies we use
| Name | Provider | Purpose | Category | Expiry |
|---|---|---|---|---|
cc_cookie | Deckgauge (first-party) | Stores your cookie-consent choice so we do not ask again. | Necessary | 6 months |
dg-theme | Deckgauge (first-party, localStorage) | Remembers your light/dark theme preference. | Necessary | Until cleared |
_ga, _ga_* | Google Analytics 4 | Distinguishes anonymous visitors and sessions to measure aggregate usage. Set only after you accept analytics. | Analytics | Up to 2 years |
_clck, _clsk | Microsoft Clarity | Persists an anonymized user/session id so Clarity can build heatmaps and session insights. Set only after you accept analytics. | Analytics | _clck up to 1 year; _clsk session |
MUID, CLID | Microsoft (clarity.ms) | Microsoft identifiers Clarity uses to recognize a browser across sessions. Set only after you accept analytics. | Analytics | Up to 13 months |
You can change or withdraw your choice at any time using the link (also in the footer of every page).
Sharing & international transfers
Analytics data is processed by Google as our processor. Google may process data in the United States; it relies on Standard Contractual Clauses and the EU–US Data Privacy Framework as its transfer mechanism. See Google's privacy policy.
Session-insight data is processed by Microsoft (Clarity) as our processor, which may also process data in the United States under Standard Contractual Clauses. See Microsoft's privacy statement.
Data retention
Aggregate analytics data is retained in Google Analytics for up to 14 months, and anonymized behavioral data in Microsoft Clarity per Microsoft's Clarity retention terms. Consent records live in your browser for up to 6 months, after which we ask again.
Your rights
Under the GDPR (and similar laws) you can request access, correction, deletion, restriction, or portability of your personal data, and object to processing. To exercise any of these, email [email protected]. You also have the right to complain to your local data-protection authority.
Changes
We'll update this page when our practices change and revise the "Last updated" date above.