Cookie Policy
How Lexmount uses cookies and similar technologies
Version: 2026-09-20.1
Cookies we use
Lexmount uses necessary cookies for authentication, security checks, language, and essential service state. These are required to provide services you request and cannot be disabled in our preference panel. Blocking them in your browser may prevent parts of the service from working.
Analytics, marketing/affiliate, and support tools are separate optional categories. When configured, Google Analytics and Microsoft Clarity load with analytics cookies enabled by default. Choose “Necessary only”, or uncheck Analytics and save, to disable their analytics cookies. After you decline, Google Analytics may send consent signals and cookieless measurement pings; Clarity performs limited, cookieless tracking with a new identifier for each page view. Other analytics, marketing/affiliate, and support tools run only after you select their category and save. Unconfigured tools are not enabled by this policy.
Services used on this site
The table below lists third parties that may receive data when their feature is available on this site. For each service, it explains the purpose, data or identifiers involved, domains, processing region, and retention period or how that period is determined. Google Analytics and Microsoft Clarity use analytics cookies by default and may send cookieless measurements after you decline; other optional services run only after you select their category and save.
| Recipient / category | Purpose / data | Identifiers / domains | Region / retention |
|---|---|---|---|
| Lexmount Product Hunt registration offer Necessary | Carry the Product Hunt registration offer from its landing link through navigation and account creation. A signed offer marker and expiry time; no user identity or browsing history. | __Host-lex-ph-referral browser.lexmount.com only. | Stored in your browser and read by the COM deployment. 24 hours after opening the Product Hunt landing link, or until cookies are cleared. |
| Lexmount display preferences Necessary | Remember banners and prompts explicitly closed by the visitor. Fixed display identifiers only; no user identity or tracking. | lexmount_banner_dismissed Current Lexmount host only. | Stored in your browser. One year from the latest dismissal, or until cookies are cleared. |
| Lexmount / Better Auth Necessary | Authenticate the user and cache validated session state. Signed session token and short-lived cached session payload. | better-auth.session_token or __Secure-better-auth.session_token; better-auth.session_data or __Secure-better-auth.session_data Current Lexmount host only; Secure prefix is used in production HTTPS. | The Lexmount deployment selected for this request. session_token: no more than 7 days; session_data cache: no more than 5 minutes. |
| Lexmount Necessary | Remember the display language. Language preference. | NEXT_LOCALE Current Lexmount host. | Stored in the user browser. Session cookie (no persistent Max-Age is configured). |
| Lexmount / Better Auth Necessary | Bind a WeChat authorization callback to the initiating browser and carry the pending phone-binding ticket. Signed random OAuth state and signed random pending-flow ticket; neither cookie contains the WeChat access token, OpenID, phone number, or OTP. | better-auth.wechat_oauth_state or __Secure-better-auth.wechat_oauth_state; better-auth.wechat_pending or __Secure-better-auth.wechat_pending Current Lexmount host only; Secure prefix is used in production HTTPS. | Stored in the user browser and read by the selected Lexmount deployment. No more than 10 minutes; each value is also cleared after its callback or binding flow is consumed. |
| Lexmount Necessary | Carry an invitation code into registration. Invitation code supplied in the URL. | invite Current Lexmount host. | Stored in the user browser and read by the selected Lexmount deployment. 24 hours. |
| Lexmount Necessary | Remember whether the console sidebar is open. Boolean interface preference. | sidebar_state Current Lexmount host. | Stored in the user browser. 7 days. |
| Lexmount Necessary | Remember Cookie choices and carry a signed registration acknowledgement to account creation. Consent booleans and revision; legal release fingerprint, document revisions/hashes, locale and acknowledgement time. | lexmount_analytics_consent; lexmount_registration_legal Current Lexmount host. | Stored in the user browser and read by the selected Lexmount deployment. Cookie preference: no more than 1 year; registration acknowledgement handoff: 1 hour. |
| Tencent Cloud CAPTCHA Necessary | Prevent automated abuse during login, registration, password reset, and sensitive account operations. IP address, browser and device characteristics, interaction/risk signals, CAPTCHA App ID, ticket and randstr. | Tencent one-time ticket and randstr; the 2.0 integration does not ask Lexmount to set a Tencent cookie. turing.captcha.qcloud.com | Tencent Cloud CAPTCHA infrastructure in mainland China. Lexmount discards the ticket after the authentication request. Tencent retains risk-control records under the versioned policy linked below. Versioned provider policy |
| Tencent Marketing Cloud (Qidian) Analytics | Measure sitewide visits, clicks, campaign attribution, verified registrations, first successful product use and confirmed promotional benefits after analytics consent. Page origins and full paths, standard UTM campaign parameters, event times, element types, browser/device details, anonymous session identifiers and pseudonymous account/event identifiers. Page text, input values, non-UTM query parameters and fragments are excluded. | A random tab-session identifier, latest campaign parameters and acknowledged event IDs in sessionStorage; server-generated pseudonymous account identifiers; Qidian cookies _qddaz, _qdda and _qddab. report.marketingcloud.tencent.com | Tencent Marketing Cloud tenant hosting region; the specific country/region has not yet been confirmed. Tab-session identifiers, campaign attribution, acknowledged event IDs and _qddab last for the browser session; _qdda expires after 30 minutes and _qddaz after 1 year (SDK defaults). Server-side events follow the Tencent Marketing Cloud tenant retention settings; the specific retention period has not yet been confirmed. Versioned provider policy |
| Google Analytics Analytics | Measure website usage with analytics storage enabled by default; cookieless measurement pings may be sent after Analytics is declined. Page URLs and referrers, interaction events, browser/device details, approximate location, and pseudonymous client/session identifiers. | _ga and _ga_<container-id> first-party cookies and persistent client/session identifiers by default. Choosing Necessary only or unchecking Analytics and saving disables analytics storage; consent signals and cookieless pings may continue. www.googletagmanager.com; *.google-analytics.com | Google global infrastructure; processing may occur outside the visitor country. Analytics cookies default to 2 years, subject to browser limits and property settings. User and event data follow the GA4 property retention settings. Versioned provider policy |
Your choices
On your first visit, Analytics is selected by default for Google Analytics and Microsoft Clarity. Choose “Necessary only”, or uncheck Analytics and save, to disable analytics cookies. Selecting Analytics and saving enables them again. Other available categories can be selected independently; unavailable categories are not displayed. If the services or purposes covered by your choice materially change, we will ask you to choose again while retaining any saved analytics opt-out. Change the choice at any time through “Cookie preferences” at the bottom-left of the page.
You can also delete cookies in your browser. Deleting the preference cookie causes the consent panel to appear again.
Retention
The current maximum is seven days for login-session cookies, one hour for the registration legal-acknowledgement cookie, and one year for cookie preferences. Retention information for third-party cookies or identifiers appears in the service table above and the linked provider policy. Declining or withdrawing Analytics prevents further reading or writing of analytics cookies by Google Analytics and Microsoft Clarity; Clarity also removes its existing cookies and restarts in no-consent mode. Other analytics, marketing/affiliate, and support scripts remain blocked without consent.
Contact
Submit cookie questions through Contact. See our Privacy Policy for other personal-data practices.