Cookies policy: HelloDrop

1The short version

HelloDrop uses essential cookies only: one keeps you signed in and one is used by our own support staff — the full list is in section 2. Alongside them sit small pieces of local storage in your own browser to remember your preferences (things like the sidebar being open or closed and which table columns you show) and — only if you choose Accept on the cookie bar — a copy of your store’s Portal screen so the Portal opens instantly (section 3). We use no analytics cookies, no advertising cookies and no third-party trackers, on the website, in the Portal or in the extension.

2The cookies we set

Name	What it does	How long
`hd_sid`	Keeps you signed in to your HelloDrop account. It holds a random session token, nothing about you personally, and it is HttpOnly (page scripts cannot read it) and SameSite=Lax.	Until you log out or the session expires
`hd_reauth`	HelloDrop staff only. Proves a member of our team re-entered their password within the last 10 minutes before sensitive staff actions, such as downloading the full database backup. It is set only on the admin path and is never set for sellers.	10 minutes
`hd_gs`	Google sign-in only (when Google sign-in is offered). While you are sent to Google and back, it holds a one-time security value so the sign-in cannot be forged or replayed. It is set only on the sign-in path, is HttpOnly and SameSite=Lax, and is cleared as soon as the sign-in completes.	10 minutes
`hd_imp`	Staff only — never set on your own sign-in. When a member of the HelloDrop team opens the Portal as your account to help you with a support request, this cookie holds that staff session. It is HttpOnly and SameSite=Lax.	24 hours

Without it the Portal cannot tell that you are signed in, so it is strictly necessary for the service you asked for.

3Local storage (in your browser only)

These never leave your device and are not used to track you. They remember:

Interface choices: sidebar open/closed, table density, shown and hidden columns, pager size.
Portal state: the workspace you were in, which announcements you have already seen or dismissed, the start-here checklist per store.
A short-lived note of copied pricing rules when you copy them from one listing to paste onto others.
Only if you chose Accept: a copy of your store's Portal screen — your listings, prices and counts as last loaded — kept so the Portal opens instantly instead of waiting for the server. It is your own data, it is only ever shown to you, it is replaced on every load, and it is deleted when you log out or switch to Essential only.

The Chrome extension stores its own settings and sign-in token in Chrome's extension storage on your device; the same rule applies: preferences and access. The extension can also count which of its features get used, anonymously, through Google Analytics — that is covered in the Privacy policy, and you can switch it off in the extension.

4What we never use

No Google Analytics or similar measurement cookies.
No advertising, remarketing or social-media pixels.
No cross-site tracking, fingerprinting or data brokers.
We never sell, rent or share browsing data. There is none to sell.

6Your controls

You can clear cookies and site data for hellodroptools.com in your browser settings at any time; you will simply be signed out and your on-device preferences reset. Most browsers also let you block cookies per site: the public pages will still read fine, but the Portal needs the hd_sid cookie to sign you in.

7Changes and contact

If this policy changes, the new version appears here with a new effective date, and material changes are announced in the Portal. Questions: hellodrop.support@gmail.com. See also the privacy policy and the terms of use.