"Cookies" here covers cookies and the equivalent browser storage mechanisms — localStorage and sessionStorage — that Draftless uses to keep the product working across page loads.

These are set without consent because the product cannot function without them:

• Session and authentication — keeps you signed in and scopes requests to your workspace.
• Security — CSRF and abuse protection on sign-in and payment flows.
• Consent record — remembers the choice you made in the consent banner, so we don't ask again on every visit.
• Language — `draftless_locale` stores whether you chose English or Deutsch.
• Currency and theme — remembers display preferences you set yourself.

Set only after you accept them in the consent banner. They tell us which features are used and where flows break, in aggregate. We do not use them to build advertising profiles, and we do not sell the data.

• Stripe — sets cookies during checkout for fraud prevention. These are strictly necessary for a payment to complete.
• Error monitoring — records error events and request identifiers to diagnose failures.

No advertising or cross-site tracking cookies are set by Draftless.

You can change or withdraw consent at any time from the cookie settings in the consent banner, and clear all browser storage for this site through your browser settings. Withdrawing analytics consent takes effect immediately; strictly necessary storage remains, because signing out would otherwise be the only way to use the site.

When we add a category or a new third party, we update this page and re-request consent where the law requires it.

Questions about cookies:

Email: privacy@draftless.dev