Cookies

Droptix uses only essential cookies. We don’t run ad tech, don’t share with third-party trackers, and don’t need a consent banner under PECR for the set below.

Essential cookies

• __Secure-authjs.session-token — keeps you signed in after you log in via magic link. Expires after 30 days of inactivity.
• authjs.csrf-token — anti-CSRF protection on sign-in form.
• authjs.callback-url — where to send you after sign-in succeeds.

If we ever add analytics or marketing cookies, we’ll put a properly-designed consent gate in place first (Reject All equally prominent, full granular controls).