Last updated:
Cookie Policy
Cookies are small files a website stores in your browser. DMdrop uses a few, plus your browser's local storage, which works the same way. This page lists them. The Privacy Policy explains how we use the data.
Your choices
- Strictly necessary cookies always run: the site can't work without them.
- Analytics are on by default. To turn them off, open Privacy settings in the site footer, or in the app under Settings → Legal & safety. In the EEA, the UK and Switzerland, analytics run without cookies and store nothing on your device.
- Marketing cookies: we don't use any. If that changes, we'll ask first and update this page.
You can also block or delete cookies in your browser, but signing in needs the necessary ones.
Strictly necessary
| Name | What it does | Lasts |
|---|---|---|
Session cookie (__Secure-better-auth.session_token) | Keeps you signed in | 30 days, renewed while you use DMdrop |
Two-factor cookies (__Secure-better-auth.trust_device, __Secure-better-auth.two_factor) | Remember a device you chose to trust, and hold a sign-in step while you enter your code | 30 days (trusted device), 10 minutes (sign-in step) |
Application cookie (dmdrop_application) | Lets you finish your beta application later on the same browser. Holds only a random token | 90 days |
dmdrop_cookie_consent (local storage) | Remembers your choice in Privacy settings | Until you change it or clear your browser |
Google sign-in (g_state, set by Google) | Only if you use "Continue with Google": remembers whether you closed Google's sign-in prompt | Set by Google |
Analytics
| Name | Who | What it does | Lasts |
|---|---|---|---|
ph_*_posthog | PostHog (US) | A random ID so we can count visits and see which pages and features are used. No email, handle or name. Not set in the EEA, UK or Switzerland | 1 year |
Other sites
Links to Instagram, Google, Apple and Cal.com take you to their sites, which set their own cookies under their own policies.