Cookie Policy
How Lexmount uses cookies and similar technologies
Version: 2026-09-20.1
Cookies we use
Lexmount uses necessary cookies for authentication, security checks, language, and essential service state. These are required to provide services you request and cannot be disabled in our preference panel. Blocking them in your browser may prevent parts of the service from working.
Analytics, marketing/affiliate, and support tools are separate optional categories. When configured, Google Analytics and Microsoft Clarity load with analytics cookies enabled by default. Choose “Necessary only”, or uncheck Analytics and save, to disable their analytics cookies. After you decline, Google Analytics may send consent signals and cookieless measurement pings; Clarity performs limited, cookieless tracking with a new identifier for each page view. Other analytics, marketing/affiliate, and support tools run only after you select their category and save. Unconfigured tools are not enabled by this policy.
Services used on this site
The table below lists third parties that may receive data when their feature is available on this site. For each service, it explains the purpose, data or identifiers involved, domains, processing region, and retention period or how that period is determined. Google Analytics and Microsoft Clarity use analytics cookies by default and may send cookieless measurements after you decline; other optional services run only after you select their category and save.
| Recipient / category | Purpose / data | Identifiers / domains | Region / retention |
|---|---|---|---|
| Lexmount Product Hunt registration offer Necessary | Carry the Product Hunt registration offer from its landing link through navigation and account creation. A signed offer marker and expiry time; no user identity or browsing history. | __Host-lex-ph-referral browser.lexmount.com only. | Stored in your browser and read by the COM deployment. 24 hours after opening the Product Hunt landing link, or until cookies are cleared. |
| Lexmount display preferences Necessary | Remember banners and prompts explicitly closed by the visitor. Fixed display identifiers only; no user identity or tracking. | lexmount_banner_dismissed Current Lexmount host only. | Stored in your browser. One year from the latest dismissal, or until cookies are cleared. |
| Lexmount / Better Auth Necessary | Authenticate the user and cache validated session state. Signed session token and short-lived cached session payload. | better-auth.session_token or __Secure-better-auth.session_token; better-auth.session_data or __Secure-better-auth.session_data Current Lexmount host only; Secure prefix is used in production HTTPS. | The Lexmount deployment selected for this request. session_token: no more than 7 days; session_data cache: no more than 5 minutes. |
| Lexmount Necessary | Remember the display language. Language preference. | NEXT_LOCALE Current Lexmount host. | Stored in the user browser. Session cookie (no persistent Max-Age is configured). |
| Lexmount / Better Auth Necessary | Bind a WeChat authorization callback to the initiating browser and carry the pending phone-binding ticket. Signed random OAuth state and signed random pending-flow ticket; neither cookie contains the WeChat access token, OpenID, phone number, or OTP. | better-auth.wechat_oauth_state or __Secure-better-auth.wechat_oauth_state; better-auth.wechat_pending or __Secure-better-auth.wechat_pending Current Lexmount host only; Secure prefix is used in production HTTPS. | Stored in the user browser and read by the selected Lexmount deployment. No more than 10 minutes; each value is also cleared after its callback or binding flow is consumed. |
| Lexmount Necessary | Carry an invitation code into registration. Invitation code supplied in the URL. | invite Current Lexmount host. | Stored in the user browser and read by the selected Lexmount deployment. 24 hours. |
| Lexmount Necessary | Remember whether the console sidebar is open. Boolean interface preference. | sidebar_state Current Lexmount host. | Stored in the user browser. 7 days. |
| Lexmount Necessary | Remember Cookie choices and carry a signed registration acknowledgement to account creation. Consent booleans and revision; legal release fingerprint, document revisions/hashes, locale and acknowledgement time. | lexmount_analytics_consent; lexmount_registration_legal Current Lexmount host. | Stored in the user browser and read by the selected Lexmount deployment. Cookie preference: no more than 1 year; registration acknowledgement handoff: 1 hour. |
| Tencent Cloud CAPTCHA Necessary | Prevent automated abuse during login, registration, password reset, and sensitive account operations. IP address, browser and device characteristics, interaction/risk signals, CAPTCHA App ID, ticket and randstr. | Tencent one-time ticket and randstr; the 2.0 integration does not ask Lexmount to set a Tencent cookie. turing.captcha.qcloud.com | Tencent Cloud CAPTCHA infrastructure in mainland China. Lexmount discards the ticket after the authentication request. Tencent retains risk-control records under the versioned policy linked below. Versioned provider policy |
| Volcengine DataFinder Analytics | Measure page visits and clicks after analytics consent. Sanitized page URLs, DOM element paths and positions, browser/device details, and anonymous browser/session identifiers. Page text, field values and URL queries are excluded. | DataFinder browser and session identifiers in first-party browser storage. gator.volces.com | Mainland China. SDK cookies are configured to expire after 7 days; browser storage persists until cleared. Server-side events follow the DataFinder application retention setting. Versioned provider policy |
| Microsoft Clarity Analytics | Understand website interactions using session recordings and heatmaps, with analytics storage enabled by default and limited cookieless tracking after Analytics is declined. Page and session replay data, URLs, clicks, scrolls, browser/device details, and pseudonymous user/session identifiers. | _clck and _clsk first-party cookies by default. Choosing Necessary only or unchecking Analytics and saving switches to a new identifier per page view without persistent session cookies. Advertising storage remains denied. www.clarity.ms; *.clarity.ms; c.bing.com | Microsoft Azure infrastructure; processing may occur outside the visitor country, including in the United States. Session recordings: 30 days. Heatmaps, click data, and labeled or favorited sessions: 9 months. Versioned provider policy |
Your choices
On your first visit, Analytics is selected by default for Google Analytics and Microsoft Clarity. Choose “Necessary only”, or uncheck Analytics and save, to disable analytics cookies. Selecting Analytics and saving enables them again. Other available categories can be selected independently; unavailable categories are not displayed. If the services or purposes covered by your choice materially change, we will ask you to choose again while retaining any saved analytics opt-out. Change the choice at any time through “Cookie preferences” at the bottom-left of the page.
You can also delete cookies in your browser. Deleting the preference cookie causes the consent panel to appear again.
Retention
The current maximum is seven days for login-session cookies, one hour for the registration legal-acknowledgement cookie, and one year for cookie preferences. Retention information for third-party cookies or identifiers appears in the service table above and the linked provider policy. Declining or withdrawing Analytics prevents further reading or writing of analytics cookies by Google Analytics and Microsoft Clarity; Clarity also removes its existing cookies and restarts in no-consent mode. Other analytics, marketing/affiliate, and support scripts remain blocked without consent.
Contact
Submit cookie questions through Contact. See our Privacy Policy for other personal-data practices.