Cookie Policy
This Cookie Policy explains how Droploud uses cookies and similar storage technologies (localStorage, sessionStorage, web beacons, pixels) when you visit droploud.com. Read alongside our Privacy Policy.
What Cookies Are
Cookies are small text files placed on your device when you visit a website. They let the site remember you across pages and visits. We also use:
- localStorage: persistent key-value storage in your browser (e.g. the cart, the cookie-consent record).
- sessionStorage: storage cleared when you close the tab (e.g. an in-progress download-gate session).
The same consent rules apply to all three categories.
Categories We Use
Cookies on Droploud fall into two categories: strictly necessary (always on) and optional analytics / advertising (loaded only if you choose Accept All in the consent banner).
Strictly Necessary
Required for the platform to function. Cannot be disabled. No consent needed under GDPR / UAE PDPL.
| Name | Storage | Purpose | Duration |
|---|---|---|---|
| droploud_session | Cookie (httpOnly) | Authentication session | 7 Days |
| dw_logged_in | localStorage | Flag that a session exists, so the app restores it on load | Until logout |
| dw_sid | sessionStorage | Download-gate session ID | Until tab closes |
| dw_sid:{track} | localStorage | Gate session ID per track, so the download survives the SoundCloud redirect | Until cleared |
| dw_unlocked:{track} | localStorage | Remembers a gate you already completed | Until cleared |
| dw_cookie_consent | localStorage | Remembers your cookie choice | Until cleared or changed |
| droploud_cart_v2 | localStorage | Shopping-cart contents | Until cleared |
| dl_sid | sessionStorage (first-party) | Exempt audience-measurement (first-party): counts unique page visits per browsing session (no cross-site tracking; IP anonymized; set for every visitor) | Until the browser tab is closed |
Analytics & Advertising
Loaded only if you choose Accept All in the consent banner.
| Provider | Purpose | Active on |
|---|---|---|
| PostHog (ph_*) | Product analytics: pageviews, feature usage. EU Cloud, first-party configured | All pages, after consent |
| Vercel Analytics | Aggregate page-performance analytics (cookieless script) | All pages, after consent |
| Google AdSense | Advertising delivery and measurement | Gate pages, if/when ads are served |
| AdSense personalisation | Interest-based ad targeting (opt-in) | Gate pages, if/when ads are served |
We do not use Facebook Pixel, TikTok Pixel or other cross-site advertising pixels. Our product analytics (PostHog) runs on PostHog's EU Cloud, is configured first-party, and never loads before you consent.
Note: Droploud also runs a privacy-preserving, first-party page-view count that operates without cookies and without consent, as privacy-preserving audience measurement of our own traffic. It uses only the session-scoped dl_sid identifier described above, performs no cross-site tracking, and anonymizes your IP address. All other analytics (PostHog) load only after you choose Accept All.
Third-Party Cookies Set By Embeds
When you interact with embedded content, the embedded service may set its own cookies. These are governed by that service's policy.
| Provider | When | Policy |
|---|---|---|
| Stripe | Shop checkout (Stripe Elements, Stripe.js) | stripe.com/cookies-policy |
| PayPal | Shop checkout (PayPal Checkout SDK) | paypal.com/cookies |
| SoundCloud | SoundCloud Widget iframe loads (player + gate) | soundcloud.com/pages/cookies |
| Sign in with Google | policies.google.com/technologies/cookies |
Why We Use Ads On Gate Pages
Droploud's gate flow is free for fans. If and when advertising is enabled on the Service, the gate page will be supported by third-party advertising (Google AdSense). Ads are served only after you have consented (Accept All, or the Google CMP where it applies). We do not run ads inside the paid Shop, inside the dashboard, or on any account-management screen.
If you decline advertising cookies, gate pages continue to work; only the ad slots stop loading personalised ads. Some non-personalised "contextual" ads may still be served using the GDPR-compliant non-personalised mode where the network supports it.
Managing Your Preferences
On your first visit you see a cookie banner with three cookie categories, each independently controllable:
- Strictly necessary: always on and cannot be switched off — sign-in, cart and download-gate sessions.
- Analytics: a toggle for anonymous product analytics.
- Marketing / advertising: a toggle for ad delivery and measurement. Because ad measurement relies on analytics, turning marketing on also turns analytics on.
The banner offers three actions:
- Accept all: turns on analytics and advertising.
- Reject non-essential: only strictly-necessary cookies are loaded.
- Save preferences: stores exactly the toggle states you selected.
Your choice is stored in dw_cookie_consent (localStorage) as all (analytics and advertising), analytics (analytics only) or essential (necessary only), and persists until you change it.
Where ads are actively served to visitors in the EEA / UK / Switzerland, ad consent is collected through a Google-certified consent-management platform (CMP) instead of this banner, in line with Google's EU user-consent policy.
Changing your mind later. A Cookie preferences link in the site footer reopens this banner at any time, so you can review or withdraw your choices whenever you like.
Browser Controls
Most browsers let you block or delete cookies in settings. Blocking essential cookies will break the Service: you may not be able to sign in or complete a purchase.
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Safari: Settings → Privacy → Manage Website Data.
- Edge: Settings → Cookies and site permissions → Cookies and site data.
Industry Opt-Outs
For advertising cookies you can also use the network-wide opt-outs:
- youronlinechoices.eu (EDAA, Europe).
- aboutads.info/choices (DAA, US).
- networkadvertising.org/choices (NAI, US).
- adssettings.google.com (Google ads settings).
Do Not Track
The Service does not currently respond to browser DNT signals. Choosing Decline in our consent banner disables non-essential tracking regardless of DNT.
International Transfers
Some cookie providers (Google) process data outside the EU/EEA. Transfers are covered by Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or the provider's own adequacy mechanism. UAE PDPL transfer rules apply per the Privacy Policy §7.
Changes To This Policy
We may update this Policy. Material changes will be posted at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
Contact
Questions about cookies? Email privacy@droploud.com.
Droploud FZ-LLC · RAKEZ · United Arab Emirates.