A cookie is a small text file stored in your browser. This page explains exactly which cookies DUZO uses and why — we keep the list deliberately short.
duzo_session — a strictly necessary cookie that keeps you logged in. It contains a random session token, not your password, and is deleted when you log out or at the latest 30 days after you logged in.
duzo_locale and duzo_locale_visit — remember which language you read DUZO in (Swedish, English, or Norwegian). If you choose a language in the language menu at the bottom of the page, the choice is stored in duzo_locale for up to one year so you don't have to pick it again on every visit. If you instead open an address with the language in it, such as duzo.se/en, the language is kept in duzo_locale_visit until you close your browser, so that pages without a language in their address — such as login and My account — appear in the same language. That does not change a language you chose in the menu: it applies again the next time you open your browser. If you have DUZO open in several tabs in different languages, duzo_locale_visit follows the tab you are using.
On the administration side (admin.duzo.se), used only by our staff, four further cookies are set that never reach visitors to duzo.se: a sign-in cookie that lasts at most eight hours and whose sign-in ends after 30 minutes of inactivity, a cookie that recognises the browser so that we can warn about a sign-in from a new device (400 days), a cookie that exists only while two-step verification is being set up (10 minutes), and one that remembers the language choice (one year). All of them are strictly necessary to protect the administration.
__stripe_mid and __stripe_sid — set by our payment provider Stripe's script when you are about to pay. They are used to detect attempted fraud, for example a card being used from many different places in a short time. __stripe_mid is kept for one year and __stripe_sid for 30 minutes. For the same purpose Stripe may set the cookie m on its own domain, m.stripe.com; it is kept for two years. They are strictly necessary for the payment to go through, are not used for marketing or tracking, and therefore require no consent.
DUZO currently uses no cookies for analytics, marketing, or third-party tracking. The exception is the payment provider's own strictly necessary anti-fraud cookies, described above, which are only set when you pay. If anything else changes, we'll update this page before it happens and ask for your consent wherever required by law.
Under Sweden's Electronic Communications Act, consent is required for cookies that aren't strictly necessary for the service to function. The cookies we set ourselves count as necessary, or equivalent to a stored preference you actively choose yourself (your language). Your language is only kept beyond your visit when you have chosen it yourself in the language menu. They therefore don't require the same kind of consent as tracking or marketing cookies.
You can delete or block cookies at any time through your browser's settings. If you block duzo_session, you won't be able to stay logged in to DUZO.
