Cookie Policy
This Cookie Policy explains how Droploud uses cookies and similar storage technologies (localStorage, sessionStorage, web beacons, pixels) when you visit droploud.com. Read alongside our Privacy Policy.
What Cookies Are
Cookies are small text files placed on your device when you visit a website. They let the site remember you across pages and visits. We also use:
- localStorage: persistent key-value storage in your browser (e.g. the cart, the cookie-consent record).
- sessionStorage: storage cleared when you close the tab (e.g. an in-progress download-gate session).
The same consent rules apply to all three categories.
Categories We Use
Cookies on Droploud fall into three categories, each with its own toggle in the consent banner: strictly necessary (always on), analytics (optional) and marketing (optional). The two optional categories load only if you enable them.
Strictly Necessary
Required for the platform to function. Cannot be disabled. No consent needed under GDPR / UAE PDPL.
| Name | Storage | Purpose | Duration |
|---|---|---|---|
| droploud_session | Cookie (httpOnly) | Authentication session | 7 Days |
| dw_logged_in | localStorage | Flag that a session exists, so the app restores it on load | Until logout |
| dw_sid | sessionStorage | Download-gate session ID | Until tab closes |
| dw_sid:{track} | localStorage | Gate session ID per track, so the download survives the SoundCloud redirect | Until cleared |
| dw_unlocked:{track} | localStorage | Remembers a gate you already completed | Until cleared |
| dw_cookie_consent | localStorage | Remembers your cookie choice | Until cleared or changed |
| droploud_cart_v2 | localStorage | Shopping-cart contents | Until cleared |
| dl_sid | sessionStorage (first-party) | Exempt audience-measurement (first-party): counts unique page visits per browsing session (no cross-site tracking; IP anonymized; set for every visitor) | Until the browser tab is closed |
Analytics & Advertising
Loaded only if you enable Analytics or choose Accept All in the consent banner.
Droploud does not display third-party advertising anywhere on the Service. With your marketing consent, the Meta Pixel measures our own campaigns on GATE 001 and may set the cookies listed below; no other marketing cookie is set.
| Provider | Purpose | Active on |
|---|---|---|
| PostHog (ph_*) | Product analytics: pageviews, feature usage. EU Cloud, first-party configured | All pages, after consent |
| Vercel Analytics | Aggregate page-performance analytics (cookieless script) | All pages, after consent |
| Meta Pixel (_fbp, fr) | Measures our own Meta ad campaigns (page view, sign-up). Set by Meta Platforms; see Meta's cookie policy | GATE 001 campaign page only, after consent |
The Meta Pixel runs on the GATE 001 campaign page only, to measure the ads we run for that event — never on the rest of the site, and never before you enable Marketing and save your preferences, or choose Accept All. We do not use TikTok Pixel or any other cross-site advertising pixel. Our product analytics (PostHog) runs on PostHog's EU Cloud, is configured first-party, and never loads before you consent.
Note: Droploud also runs a privacy-preserving, first-party page-view count that operates without cookies and without consent, as privacy-preserving audience measurement of our own traffic. It uses only the session-scoped dl_sid identifier described above, performs no cross-site tracking, and anonymizes your IP address. All other analytics (PostHog) load only after you enable Analytics or choose Accept All.
Third-Party Cookies Set By Embeds
When you interact with embedded content, the embedded service may set its own cookies. These are governed by that service's policy.
| Provider | When | Policy |
|---|---|---|
| Stripe | Shop checkout (Stripe Elements, Stripe.js) | stripe.com/cookies-policy |
| PayPal | Shop checkout (PayPal Checkout SDK) | paypal.com/cookies |
| SoundCloud | SoundCloud Widget iframe loads (player + gate) | soundcloud.com/pages/cookies |
| Sign in with Google | policies.google.com/technologies/cookies |
Managing Your Preferences
On your first visit you see a cookie banner with three cookie categories, each independently controllable:
- Strictly necessary: always on and cannot be switched off — sign-in, cart and download-gate sessions.
- Analytics: a toggle for anonymous product analytics.
- Marketing / advertising: a toggle for measuring our own campaigns (Meta Pixel), never for third-party ads. Because campaign measurement relies on analytics, turning marketing on also turns analytics on.
The banner offers three actions:
- Accept all: turns on analytics and advertising.
- Reject non-essential: only strictly-necessary cookies are loaded.
- Save preferences: stores exactly the toggle states you selected.
Your choice is stored in dw_cookie_consent (localStorage) as all (analytics and advertising), analytics (analytics only) or essential (necessary only), and persists until you change it.
This banner is the only place your consent is collected, in every country. No third-party consent-management platform sits between you and Droploud.
Changing your mind later. A Cookie preferences link in the site footer reopens this banner at any time, so you can review or withdraw your choices whenever you like.
Browser Controls
Most browsers let you block or delete cookies in settings. Blocking essential cookies will break the Service: you may not be able to sign in or complete a purchase.
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Settings → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions → Cookies and site data.
Industry Opt-Outs
For advertising cookies you can also use the network-wide opt-outs:
- youronlinechoices.eu (EDAA, Europe).
- aboutads.info/choices (DAA, US).
- networkadvertising.org/choices (NAI, US).
- adssettings.google.com (Google ads settings).
Do Not Track
The Service does not currently respond to browser DNT signals. Choosing Decline in our consent banner disables non-essential tracking regardless of DNT.
International Transfers
Some cookie providers (Google) process data outside the EU/EEA. Transfers are covered by Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or the provider's own adequacy mechanism. UAE PDPL transfer rules apply per the Privacy Policy §7.
Changes To This Policy
We may update this Policy. Material changes will be posted at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
Contact
Questions about cookies? Email privacy@droploud.com.
Droploud FZ-LLC · RAKEZ · United Arab Emirates.