# Cookie Policy Source: Last updated: November 9, 2026 deckpa.com itself sets no cookies. Google Analytics is used to measure how the site is used; its script and cookies load only if you press "Accept" on the cookie notice. Apart from that, your browser stores two small values: the theme you choose and your cookie choice. ## Cookies and browser storage Cookies are small text files a website stores on your device. Browser storage (`localStorage`) works in a similar way, but its values stay in the browser and are not sent to the server with each request. This policy covers both, on deckpa.com and in the panel you install. ## Categories on deckpa.com - **Strictly necessary:** the site itself uses none. It has no sign-in, form or session, so it needs no cookie to work. The site is delivered through Cloudflare; when Cloudflare runs a security check, such as bot protection or a verification page, it may set its own security cookie (for example `__cf_bm` or `cf_clearance`). Such a cookie is used only for that check. - **Functional (preferences):** two `localStorage` values. `deckpa-theme` keeps the theme you choose with the theme button (dark or light) and is written only when you press that button. `deckpa-consent` keeps your choice (`granted` or `denied`) when you press "Accept" or "Decline" on the cookie notice, so you are not asked again on every page. Both stay until you clear site data and are not sent to our server. - **Performance and analytics:** Google Analytics 4. It loads only after you press "Accept"; if you do not accept, or you decline, it does not load. When you accept, Google's script loads and Google sets cookies that start with `_ga` and with `_ga_` followed by the measurement ID. Their default lifetime is 2 years. They are used to tell a returning browser apart and to measure page views. - **Advertising and targeting:** none. The language is chosen by the address prefix (for example `/en`); it is not kept in a cookie or in storage. ## Third parties Pages load no third-party fonts, images or frames. The only exception is Google Analytics: if you accept, its script loads from `www.googletagmanager.com` and measurement data is sent to Google Analytics servers. The site's content security policy additionally allows these Google addresses and no other external source. How Google processes this data is described in the [Privacy Policy](https://deckpa.com/en/legal/privacy). ## Managing your preferences On your first visit the cookie notice offers "Accept" and "Decline". The analytics script does not load until you choose. Google's Consent Mode is not used; if you do not accept, no request is sent to Google. You can change your decision at any time with the "Cookie preferences" button at the bottom of the page. When you choose "Decline", cookies that start with `_ga` are deleted and the analytics script does not load on later page views. You can also delete or block cookies and site data in your browser settings; if you clear site data, the theme returns to the default and the notice appears again. If you block the panel's session cookies, you cannot sign in to the panel. ## Customer portal Account sign-in is not open yet. When it opens, the cookies needed for the session will be added and this page will be updated at that time. ## The panel's own cookies The panel you install on your own server uses cookies and browser storage on your own address. These stay on your server, are not sent to Deckpa and we have no access to them. The panel uses no analytics tool. For information, what the panel writes is: - **Session:** `deckpa_session` (until the browser closes), `deckpa_pending` (5 minutes during two-step sign-in), `mos_form_csrf` (sign-in form protection, 2 hours), `deckpa_console` (phpMyAdmin and OpenLiteSpeed WebAdmin session, 2 hours), `deckpa_imp` (the mode for signing in as a customer user, for the session). - **Status screen:** `deckpa_wall` (365 days). - **Interface preferences:** language, theme, brand color, corner radius, density and side menu preferences (1 year). These are cookies starting with `mos_`, such as `mos_lang` and `mos_theme`, and `localStorage` and `sessionStorage` entries starting with `deckpa`. Session cookies are written as HttpOnly, Secure and SameSite=Strict. The panel loads no external resources; this is restricted by the panel's content security policy. ## Changes This policy may be updated for technical or legal reasons, for example when the customer portal opens. The current version applies from the date it is published on this page, and the date at the top changes. ## Contact You can send questions about this page to [info@moserra.com](mailto:info@moserra.com). For written correspondence, the registered address is 117 S Lexington St, Ste 100, Harrisonville, MO 64701-2444, USA. Other contact details are on the [contact page](https://deckpa.com/en/contact).