Legal

Cookie Policy

Last updated: November 11, 2026

This policy explains how Bundle Drop uses cookies and similar browser storage on bundledrop.app, www.bundledrop.app and developer.bundledrop.app. Read it alongside our Privacy Policy, which explains our wider use of personal data.

1. Cookies and browser storage

Cookies are small text files stored by your browser. We also use browser technologies such as local storage, session storage and IndexedDB. These are different from cookies, but can also remember information between page visits. This policy covers those technologies where they support the purposes described below.

2. Your choices

Optional analytics and advertising measurement are off until you choose to allow them. Our cookie banner offers three actions:

  • Accept all: allow both Analytics and Advertising measurement.
  • Reject non-essential: decline both optional categories.
  • Manage preferences: review the categories and save your choices. Optional switches start off if you have not made a choice; reopening preferences shows your saved choices.

Advertising measurement relies on Analytics to record the actions attributed to ads, so it can only be enabled when Analytics is also enabled. Turning Analytics off also turns Advertising measurement off. Personalized advertising remains disabled, including when you accept all cookies.

Your choice is shared between our website and developer console in the same browser. Use Cookie preferences in either footer to change or withdraw it at any time. Withdrawal stops future collection for that optional purpose; it does not automatically erase data already sent. Contact us about deletion requests using the address below.

3. What we use storage for

Essential functionality and preferences

We use browser storage where needed for sign-in, security and requested features. We also store your cookie decision so we can respect it. Rejecting optional cookies does not prevent you from browsing the website or using your account. Blocking all browser storage can affect sign-in and other features that depend on it.

Analytics — optional

With your permission, Google Analytics / Firebase Analytics helps us understand which pages and features are used, how visitors find Bundle Drop, and actions such as signing up or creating a project. Analytics uses browser identifiers and session information. It can include approved campaign details, page information, browser and device information; it is not fully anonymous. We do not set an Analytics user ID or send account names, email addresses, passwords or access tokens as Analytics event fields.

Advertising measurement — optional

With your additional permission, Google can use advertising storage and advertising-related user data to connect actions such as a signup to an ad interaction. This helps us measure campaign results and use those results in Google Ads. It can involve advertising click identifiers and conversion information shared between Google Analytics and Google Ads. We do not enable personalized advertising or remarketing through this choice.

Learn how Google processes this information in How Google uses information from sites or apps that use its services and How Google uses cookies.

Technical performance monitoring

Firebase Performance Monitoring runs automatically in the production developer console, separately from these optional cookie choices. It measures selected API request times and browser loading performance. It can use a Firebase installation identifier and browser storage such as IndexedDB; this is distinct from Analytics and advertising cookies. The Privacy Policy describes the measurements and their limitations. This monitoring is not enabled on staging, local development or preview hosts.

4. Storage names and duration

  • bd_cookie_consent_v4: our first-party cookie stores the two optional choices, the decision version and expiry. A new choice lasts up to 365 days and is shared across our production website and console. Earlier valid denials keep their original expiry when migrated; earlier grants require a fresh choice for the expanded scope.
  • bd_analytics_consent_v3: a compatibility cookie keeps older open pages from collecting under an outdated choice. It does not grant the new advertising purpose and expires with the linked consent decision.
  • _ga and _ga_*: first-party Google Analytics cookies distinguish browsers and maintain session information after Analytics is allowed.
  • _gcl_*: Google advertising measurement cookies may store ad-interaction information after Advertising measurement is allowed. Their presence depends on the Google tags and ad interactions involved.
  • Functional browser storage: account/session and requested preference data can use local or session storage rather than cookies. Session storage normally ends when its browser tab or window closes; persistent storage can remain until removed by the application or browser.

The 365-day duration above applies to our cookie decision, not to every cookie or data record. Google cookies have their own lifetimes, which can be refreshed through use and limited by browser settings. Google describes these in its cookie information linked above. Deleting a browser cookie is separate from deleting information already held by a provider.

5. Managing cookies in your browser

Your browser can display, remove or block cookies and other site storage. Removing our decision cookie may cause the banner to appear again; it does not grant consent. A choice in one browser does not automatically apply to another browser or device. A material change to the optional purposes may require a new choice.

External sign-in and payment pages can use their own cookies and policies when you choose those services. Our cookie controls do not change your settings on those providers' websites.

6. Contact

For questions about cookies, preferences or personal data, contact support@bundledrop.app.