Cookie Notice and Privacy Choices
The storage used for sign-in, security and requested preferences.
Last updated October 10, 2026Current technologies
DTM uses essential authentication and security cookies and storage to provide requested features. The app does not include advertising pixels or embedded advertising. Optional Google Analytics is off until you accept analytics in Privacy choices. Cookie purpose depends on its actual use, not simply on whether it comes from a first party.
Optional measurement and choices
dtm_analytics_consent stores your analytics choice for up to 180 days. Rejecting analytics prevents the Google tag from loading. A Global Privacy Control signal overrides an earlier acceptance. With acceptance, Google may use DTM-prefixed measurement cookies such as dtm_ga and dtm_ga_MQHZ222BZV, configured for up to 180 days; browser or provider behavior can shorten retention. The optional dtm_analytics_signup cookie carries a random, identity-free completion marker for up to five minutes after a verified email-signup confirmation or immediately confirmed signup. It is consumed once when the consented tag queues sign_up. It is not created without prior analytics consent; failed, duplicate and unconfirmed registration submissions are not completed signup events.
Privacy choices is available on every page. Rejecting after acceptance reloads the document, disables measurement and clears DTM measurement cookies; prior Google records are not deleted. Measurement sends route categories without query strings or fragments, origin-only referrers and generic page titles. It excludes account details and private research content. Declined consent, blocked scripts, expired markers or confirmation in another browser can cause undercounting. Google processing is described at policies.google.com/privacy.
Authentication cookies
Supabase authentication cookies use a project-specific prefix, with names such as sb-…-auth-token; larger values can be split into numbered chunks. They contain session credentials used to keep you signed in. DTM sets these cookies on its site with HttpOnly, SameSite=Lax and Secure in production, with a site-wide path. They are created or updated during account authentication and refresh, and cleared on sign-out.
The configured SDK cookie maximum age is up to 400 days and can refresh during use; access-token validity is shorter, and the cookie duration does not guarantee continuous access. A related sb-…-auth-token-code-verifier cookie may be used during an authentication code exchange and is removed when that flow consumes it. Recovery flows can also use dtm_recovery_flow, with a ten-minute maximum age and a /account/password path, to limit password-reset actions to the recovery session. These are security functions, not advertising identifiers.
Preferences and storage
Indicator filters use sessionStorage under dtm-indicator-search-v1 to remember search and filter selections in the current browser tab. It is not sent to an advertising provider. Clear filters resets the saved selection; closing the tab ends its session storage. Saved account time-zone, clock, dashboard and watchlist preferences are account records rather than a separate advertising cookie.
Provider services and external links
Hosting and authentication providers process operational requests and security information as described in the Privacy Notice. Stripe's hosted checkout and billing portal are separate provider pages and can use their own payment, security and fraud-prevention cookies under Stripe's notices. External news and source links lead to other sites with their own storage practices. DTM's headline links do not grant those publishers access to your DTM account.
Your controls
Use browser settings to inspect, restrict or clear cookies and site storage. Sign out to clear the active DTM authentication cookies. Restricting essential storage can prevent login or preference persistence, and clearing storage does not delete server-side account information or stop every network request.
DTM does not currently sell personal information or share it for cross-context behavioral advertising. A Global Privacy Control signal disables optional analytics while preserving essential login storage. Use Privacy choices to change analytics consent at any time. Contact support@destroythemarkets.com for privacy requests or questions.