Cookie Policy
Polityka Plików Cookie
We use the minimum cookies necessary to operate our services. We do NOT use advertising or tracking cookies — we have no advertising partners. We do NOT sell cookie data to any third party. Analytics are optional. Your preferences are stored for 12 months and can be changed anytime.
1. What are cookies?
2. How we use cookies
We use cookies on:
- droppey.com — our public website
- dashboard.droppey.com — the Merchant Dashboard (authenticated)
- legal pages — privacy, terms, cookies
We do not use cookies in our mobile app, SMS notifications, or webhook communications.
3. Cookies we use
3.1 Strictly necessary
Essential for the site and dashboard to function. Cannot be switched off.
| Cookie | Type | Purpose | Duration | Consent? |
|---|---|---|---|---|
| droppey_session | Session | Maintains login on the dashboard | Session | No |
| droppey_csrf | Session | CSRF protection on form submissions | Session | No |
| droppey_lang | Persistent | Remembers language (PL / EN / UK) | 12 months | No |
| droppey_consent | Persistent | Stores your cookie consent (anonymised) | 12 months | No |
3.2 Functional
Improve your experience. Optional.
| Cookie | Type | Purpose | Duration | Consent? |
|---|---|---|---|---|
| droppey_dashboard_view | Persistent | Dashboard layout preferences | 12 months | No |
| droppey_timezone | Persistent | Displays times in your timezone | 12 months | No |
3.3 Analytics — opt-in only
Anonymised, aggregated. IP anonymisation enabled. No Google Signals, remarketing or advertising features.
| Cookie | Type | Purpose | Duration | Consent? |
|---|---|---|---|---|
| _ga, _ga_[ID], _gid | Persistent | Google Analytics — only if you opt in | 24 months | Yes |
| plausible_events | Session | Plausible — privacy-first, no PII | Session | No |
3.4 Advertising — none
No Facebook Pixel. No Google Ads. No LinkedIn Insight Tag. No remarketing. We actively choose not to use advertising tracking.
4. Third-party cookies
| Third party | Cookie(s) | Purpose | Privacy policy |
|---|---|---|---|
| Cloudflare | __cf_bm, cf_clearance | DDoS protection — strictly necessary | cloudflare.com/privacypolicy |
| Google Analytics (opt-in) | _ga, _ga_[ID], _gid | Anonymised analytics | policies.google.com/privacy |
| AWS CloudFront | CloudFront sessions | CDN / asset caching | aws.amazon.com/privacy |
5. Managing your preferences
A consent banner appears on first visit. Accept, decline optional, or customise. Your choice is saved for 12 months and can be changed any time via the Cookie settings button above or in the footer.
You can also manage cookies via your browser: Chrome → Settings → Privacy · Firefox → Privacy & Security · Safari → Preferences → Privacy · Edge → Cookies and site permissions.
To opt out of Google Analytics globally, install the official add-on at tools.google.com/dlpage/gaoptout.
6. Changes
We may update this policy as cookies or law change. Significant changes will be announced on droppey.com. Polish version available at droppey.com/legal/cookies/pl (coming soon).
7. Contact
- Privacy — [email protected]
- Data Protection Officer — [email protected]
- Supervisory authority (UODO) — uodo.gov.pl, ul. Stawki 2, 00-193 Warsaw