DRAFT — requires lawyer review. Not legal advice.
Dropwarden Cookie Policy
Effective date: TBD
This policy explains the cookies and similar technologies (local storage, session storage) used on our
website at dropwarden.com and in the portal and web file client at app.dropwarden.com. It supplements our
Privacy Policy.
We do not use advertising or cross-site tracking cookies, and we do not sell or share personal information collected through cookies.
Categories
Strictly necessary (always on)
These are needed for the site and the Service to work and for security. They do not need consent.
| Name (indicative) | Set by | Where | Purpose | Lifetime |
|---|---|---|---|---|
| Session cookie | Us | app.dropwarden.com |
Keeps you signed in to the portal and web file client | Session or until sign-out (verify) |
| OIDC interaction and session cookies | Us | api.dropwarden.com |
Runs the "Log in with Dropwarden" sign-in flow and single sign-on | Minutes for interactions; session cookie up to the configured session length (verify) |
| CSRF token | Us | app.dropwarden.com |
Protects forms against cross-site request forgery | Session |
| Cookie consent record | Us | dropwarden.com, app.dropwarden.com |
Remembers your cookie choices | 12 months |
| Upload resume data (local storage) | Us | app.dropwarden.com |
Lets large uploads resume after a lost connection | Until the upload completes or is cancelled |
| Stripe cookies | Stripe | Stripe Checkout and Customer Portal pages (Stripe's domains) | Payment processing and fraud prevention when you subscribe or manage billing | Set by Stripe; see Stripe's cookie policy |
Preferences such as dark mode or language may be stored in local storage on your device. They are not sent to us.
Functional: live chat (consent required where the law requires it)
| Name (indicative) | Set by | Where | Purpose | Lifetime |
|---|---|---|---|---|
Crisp chat cookies (for example crisp-client/session/...) (verify names) |
Crisp | dropwarden.com, app.dropwarden.com (portal pages only) |
Shows the chat widget and keeps your conversation across pages and visits | Up to 6 months (verify) |
In the EEA, the UK and Switzerland, the chat widget is not loaded until you accept functional cookies. You
can still reach us at [email protected].
Analytics
None at launch. If we add privacy-friendly analytics, we will update this policy and, where required, ask for consent first.
Managing your choices
- Use the "Cookie settings" link in the website footer to change or withdraw consent at any time.
- Your browser settings can block or delete cookies. Blocking strictly necessary cookies will stop sign-in from working.
- We honour Global Privacy Control signals.
Changes
We will update this policy when we change the cookies we use. The effective date above shows the latest version.
Questions: [email protected].