Cookies, plainly.
What Dropinly stores in your browser, what it's for, how to turn it off.
What is a cookie?
A cookie is a small text file your browser stores on your device when you visit a website. Cookies let sites remember you (so you stay signed in), remember preferences (like language), and measure how features are used.
Cookies we use
| Name | Purpose | Category | Expires |
|---|---|---|---|
| sb-vkakxcnycfblrmzdvpcn-auth-token | Sign-in session (Supabase) | Essential | 1 hour (refreshes) |
| NEXT_LOCALE | Locale routing | Essential | 1 year |
| DROPINLY_USER_LOCALE | Customer's explicit language preference | Essential | 1 year |
| __cf_bm, _cfuvid | Cloudflare bot management | Essential | 30 min — session |
| ph_*, Clarity scripts/storage | PostHog product analytics and Microsoft Clarity public-page heatmaps | Analytics | PostHog: 1 year; Clarity: project retention setting |
| cf_clearance | Cloudflare challenge passage | Essential | 30 min |
Third parties
When you complete a deposit through Stripe Elements, Stripe sets its own cookies on its iframe (m, machine_identifier, __stripe_sid, __stripe_mid). These are set by stripe.com, not dropinly.com — your browser routes them to Stripe per same-origin rules. See Stripe's cookie policy.
Manage your preferences
Analytics cookies are optional. In the EU, EEA, and UK they stay off until you accept them; elsewhere they run by default unless you turn them off here or send a Do-Not-Track signal. You can change this at any time.
Analytics cookies are currently enabled.
How to control them
- Disable analytics: use the toggle above, install a privacy extension (uBlock Origin, Privacy Badger), or set your browser's Do-Not-Track signal — we honor DNT. Clarity is not loaded on admin, account, signin, shop booking, invite, or messaging pages.
- Clear all cookies: your browser's site-data settings — but you'll be signed out
- Block third-party cookies: Stripe Elements may not work; deposits would fail