Cookie Policy
Last updated October 18, 2026
This Cookie Policy explains how Dragon Labs LLC (doing business as Lizard) ("we," "us," or "our") uses cookies and similar tracking technologies when you visit our website at lizard.build or use our Services.
What Are Cookies
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work efficiently, provide information to site owners, and enable certain features. We also use similar technologies such as pixel tags, web beacons, and local storage.
Types of Cookies We Use
We categorize cookies into the following types:
Strictly Necessary Cookies
These cookies are essential for the operation of our Services. They cannot be switched off. They are set in response to actions you take, such as logging in, setting preferences, or filling in forms.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| dl_token | Lizard | Authenticate logged-in users and maintain session state | 30 days |
| dl_oauth_tx | Lizard | Protect against cross-site request forgery attacks | Up to 10 minutes |
| cookie-consent (localStorage) | Lizard | Store your cookie consent preferences | Until you clear site storage |
| __stripe_mid, __stripe_sid | Stripe | Detect and prevent fraudulent payments | 30 min – 1 year |
Analytics Cookies
These cookies help us understand how visitors interact with our Services by collecting and reporting information. Where the law requires consent, we only place analytics cookies after you accept.
In the United States, Australia, New Zealand, Japan, Singapore, Hong Kong and India, PostHog analytics cookies are on from your first page and the cookie banner stays closed. This policy is our notice, and you can turn them off at any time in Cookie settings.
We tell which country you are in from your IP address, which we do not store. If we cannot tell, or the address belongs to a data center or a known VPN, we ask first. We also ask first wherever you are if your browser sends a Global Privacy Control signal.
Session replay, Google Analytics and Ahrefs Analytics always wait until you click Accept all.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| ph_* | PostHog | Monitor and analyze usage patterns, page views, clicks, session duration, and session replay | 1 year |
| _ga, _ga_* | Google Analytics | Distinguish unique users, measure site performance and traffic sources | 2 years |
| _gid | Google Analytics | Distinguish users for analytics within a 24-hour period | 24 hours |
Session Replay
If you click Accept all, PostHog records a replay of your visit — the pages you open, where you click, and how you scroll. We watch these to find the places where the product confuses people. Replays are kept for 30 days and then deleted.
We mask form fields and most of the data you store with us that the dashboard shows. Masking can miss some data, so a replay may still contain parts of it.
Rejecting non-essential cookies stops browser session replay. Cookieless browser analytics and the server-side product analytics described below continue.
Marketing Cookies
These cookies are used to deliver advertisements relevant to you and to measure the effectiveness of advertising campaigns. We only place marketing cookies with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Google Ads | Measure ad campaign performance and conversion tracking | 90 days |
| IDE, NID | Remarketing, ad personalization across Google Display Network | 6 months – 2 years |
Browser Analytics Without Cookies
If you reject non-essential cookies, or leave the banner alone, we still count your visit. We store nothing on your device to do it — no cookie, no local storage, no session storage. The only thing we keep there is the record of your choice itself, so we can honour it.
PostHog measures these browser visits and interactions using a code generated on its servers that changes daily. In this mode, browser events do not use a persistent cookie identifier or session replay. This is separate from the account-linked server events described below.
We do this on our legitimate interest in knowing how many people use Lizard and which pages they read. It places nothing on your device, so it needs no cookie consent, but you can still object to it — see Your Rights in our Privacy Policy.
Google Analytics and Ahrefs Analytics have no such mode. Neither one loads until you click Accept all.
Server-side product analytics.
Our servers also send account-linked product events to PostHog, including activity through the dashboard, APIs, Lizard CLI, and integrations. These events may include user and workspace IDs, username, email, account details, and actions such as sign-in and deployment. Rejecting browser cookies does not stop this server-side analytics. We use it to understand service use and diagnose problems, based on our legitimate interests. To object, contact team@lizard.build. See our Privacy Policy for details.
How to Manage Cookies
You can manage your cookie preferences at any time:
- Cookie consent banner: Use Cookie settings on this page or in the site footer to change your choice at any time. Reject non-essential stops optional browser analytics cookies and session replay, while essential cookies remain available. When you withdraw a previous acceptance, or turn off cookies that were on by default, we clear analytics cookies accessible to this site and reload the page to stop scripts already loaded. Cookieless browser analytics and server-side product analytics continue as described above.
- Browser settings: Most browsers let you block or delete cookies and clear site storage, including localStorage. Use these controls to remove cookies set on third-party domains. Blocking essential cookies may prevent the Services from working.
- Google Analytics opt-out: You can opt out of Google Analytics by installing the Google Analytics browser plugin.
- Google Ads opt-out: You can manage ad personalization through Google Ads Settings.
Customer-Hosted Applications
If you host applications on Lizard that use cookies, you are independently responsible for ensuring your own cookie compliance, including providing appropriate cookie notices and obtaining consent from your end users.
Updates to This Policy
We may update this Cookie Policy from time to time. The updated version will be indicated by an updated date at the top of this page.
Contact Us
If you have questions about our use of cookies, please contact us at team@lizard.build.
We use cookies for essential site functionality and analytics. See our Cookie Policy.