Cookie Policy

Last updated: September 2026

Overview

The marketing website stores nothing in your browser. The signed-in application uses a few first-party cookies so it knows who is signed in. This page describes both.

The Droplana website (marketing pages and blog)

The pages under droplana.com - the homepage, pricing, blog, and comparison pages - set no cookies and store nothing in your browser: no localStorage, no sessionStorage. No visitor ID is created.

These pages send a pageview beacon to our own server when you load a page. It's a first-party request, not a third-party script, and it doesn't set a cookie. Per page view, we log:

• The page path you visited
• The referring page, if any
• Your browser's user agent string
• A timestamp
• Your IP address, with the last part removed (the last octet of an IPv4 address, or the last 80 bits of an IPv6 address) before anything is written down

The logged IP is truncated before storage. No persistent visitor identifier is assigned by the beacon. The record goes into a server log, not a visitor database or a profile. Automated traffic - crawlers, bots, uptime monitors - is filtered out before it's logged at all.

We don't run Google Analytics, Meta Pixel, or any other third-party analytics or advertising script on these pages.

The Droplana app

Signing in and using the product - the business dashboard and the client portal - is different from browsing the marketing site, because a portal is a session-based product: it needs to know who's signed in from one request to the next. That requires a small number of cookies. These first-party cookies support sign-in, session protection and saved preferences. None are used for advertising or cross-site tracking.

Cookie	Purpose	Duration
session_id	Keeps a Business account signed in	31 days
csrf_token	Protects signed-in requests from cross-site forgery	31 days
portal_sid	Keeps a Customer signed in to their portal	24 hours
portal_csrf_token	Protects portal requests from cross-site forgery	24 hours
business_device	Recognizes a returning device for one-click Business login	90 days
portal_device	Recognizes a returning device for one-click portal login	90 days
lang	Remembers your interface language	90 days
signer_name	Prefills your typed name when signing a document	About 1 year

None of these cookies are used to build advertising profiles, track you across other websites, or feed any analytics platform.

Why there is no cookie banner

The marketing website shows no consent banner because nothing on it needs consent: it sets no cookies, stores nothing in the browser and loads nothing from third parties. The application's cookies are needed for the sign-in, session-protection and preference purposes listed in the table.

Third parties

Droplana does not use third-party advertising trackers. The marketing pages load their scripts, styles, fonts and images from droplana.com itself, so browsing them sends no request to another company. The sign-in pages and the application still load their fonts from Google's font service, which receives your IP address and browser details when those pages load. The infrastructure and service providers that support the product - hosting, transactional email, payments - process account and billing data as sub-processors, not as trackers; see the sub-processor list in our DPA and Privacy Policy for details. How the app protects signed-in sessions is described on the Security page.

Managing cookies in your browser

You can view, block, or delete cookies through your browser's settings at any time. Since the app's cookies are what keep you signed in and remember your preferences, clearing them will sign you out of any active session and reset your saved language and device recognition.

Changes to this policy

We'll update this page if what we collect or how we collect it changes, and update the "Last updated" date above accordingly.

Contact

For questions about this policy, contact us at privacy@droplana.com.