Cookie Policy
What Druma stores in your browser, why, and how to control it.
Effective 27 April 2026 · Version 2026-04-27
This document is available in English only. The English version is the legally binding version.
What we use
Druma is a B2B operational tool. We do not use marketing cookies, advertising pixels, or third-party analytics. The only browser storage we set is what the application strictly needs to keep you signed in and remember your preferences.
Inventory
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
| sb-* (Supabase auth) | localStorage | Keeps you signed in | Until logout | Strictly necessary |
| cookie-consent | localStorage | Records that you saw the cookie banner | 1 year | Functional |
| druma_active_company | localStorage | Remembers your active company in multi-company accounts | Session | Functional |
| druma_language | localStorage | Remembers your interface language | 1 year | Functional |
| druma_theme | localStorage | Remembers light or dark mode | 1 year | Functional |
| druma_pending_consent | localStorage | Temporarily stores OAuth signup consent before write-back | Until first authenticated load | Strictly necessary |
| druma_wake_lock_enabled | localStorage | Driver PWA screen wake-lock preference (keeps screen on during active order) | Persistent | Functional |
| druma_stripe_link_attempted_<company_id> | localStorage | Prevents a duplicate Stripe customer-link call being sent on repeated logins for the same company | Persistent | Strictly necessary |
| __cf_bm | cookie (third-party, Cloudflare) | Bot management | 30 minutes | Strictly necessary |
Third-party cookies
Cloudflare provides our edge CDN and may set the __cf_bm cookie for bot management. This is part of the infrastructure layer and we do not control its lifecycle directly.
We do not embed Google Analytics, Facebook Pixel, Hotjar, Segment, or any other tracking script.
Your choices
Strictly necessary entries (authentication and the Cloudflare bot cookie) cannot be disabled without breaking the application. Functional entries can be cleared at any time by clearing your browser's site data for druma.io. Doing so will sign you out and reset your language and theme preferences.
If we ever introduce optional analytics or marketing cookies in the future, we will update this page, surface a granular consent panel in the cookie banner, and require an explicit opt-in.
Changes
We will revise this page if our cookie usage changes. The version and effective date at the top will be updated.