Cookie Policy

1. What cookies are

Cookies are small text files stored on your device by your browser. Similar technologies, such as local storage, work in the same way. We refer to all of them as cookies in this policy.

2. Cookies that are always on

These are needed to run DMDrop and don't need your consent. They are not used for advertising.

• Session cookie — Keeps you signed in to your account and protects it from unauthorized access. Cleared when you sign out or delete your account.
• dmdrop_consent — Remembers your cookie choice. Kept for 1 year.
• dmdrop_region — Records whether you are in a region where we ask for consent first (the EEA, UK, Switzerland, or an unknown location). Kept for 1 day.
• viewport — Remembers whether to show the mobile or desktop layout. Kept for 1 year.
• device_hints — Basic device details used to adapt the experience to your device. Kept for 1 day.
• bk_<id> and funnel session cookies — Let you manage a booking you made, or continue a checkout funnel, without creating an account.
• dmdrop_ref and dmdrop_ref_code — Record which referral link brought you to DMDrop, so the referrer can be credited. Kept for up to 30 days.
• dmdrop_automation_draft and dmdrop_sidebar_collapsed (local storage) — Save an unfinished automation and your dashboard layout on your device only.

3. Analytics and marketing cookies (with your consent)

On our own website and app, we use the following to understand how DMDrop is used and to measure our marketing. If you are in the EEA, UK, or Switzerland, or we can't tell where you are, they stay off until you accept. Elsewhere they are on unless you reject them using the cookie settings link in the footer.

• Product analytics (PostHog) — Page views and feature usage, to improve the product. Cookie names start with ph_.
• Google Analytics — Site traffic measurement (_ga, _ga_*). Advertising storage, ad user data, and ad personalization are always denied.
• Meta Pixel — Measures visits to our marketing website so we can evaluate our campaigns on Meta platforms (_fbp). It loads only after you accept.

These tools run only on DMDrop's own pages. We do not run our analytics or the Meta Pixel on creator storefronts, whose visitors belong to the creator.

4. Meta and Instagram

• When you connect Instagram, you sign in on Meta's own pages. Meta sets and reads its own cookies there under Meta's Cookie Policy. We don't control those cookies.
• The connection itself uses a secure access token, not cookies. We never receive your Instagram password. You can revoke access at any time in Instagram under Settings → Website permissions → Apps and websites.
• Comments and messages we process through the Instagram API are not collected with cookies. They are covered by our Privacy Policy.
• If a creator adds Meta Pixel or other tracking to their own storefront, the creator is responsible for it and for asking their visitors for consent.

5. Your choices

• Cookie banner: where we ask first, use Accept or Reject. Rejecting turns off analytics and marketing cookies. Essential cookies are not affected.
• Cookie settings link: at the bottom of every page, use Reject analytics cookies (or Accept analytics cookies) to change your choice at any time, wherever you are.
• Browser settings: you can block or delete cookies in your browser at any time. Blocking essential cookies will stop sign-in from working.
• Meta ads: you can manage how Meta uses data for ads in your Meta account settings.

6. Changes and contact

We update this policy when we add or remove cookies, and change the effective date above. Questions? Email [email protected] or use our contact form. To delete your data, see our data deletion instructions.