Cookie Policy
Last updated: October 10, 2026
This page lists everything Drawlytic stores in your browser and every third-party request our pages can make, so you can make an informed choice. Short version: one essential login cookie, one sign-in protection cookie, your own consent choice — and the Meta Pixel only if you accept it.
1. Cookies and browser storage
| Name | Provider | Purpose | Duration | Type | Consent |
|---|---|---|---|---|---|
bs_session | Drawlytic (first party) | Keeps you signed in to your account. | 30 days | Cookie — strictly necessary | No consent needed |
bs_oauth_state | Drawlytic (first party) | Protects Google sign-in against forgery; set only during sign-in. | 10 minutes | Cookie — strictly necessary | No consent needed |
bs_ads_consent | Drawlytic (first party) | Remembers your Accept/Decline choice from the cookie banner. | Until you clear it | localStorage — functional | No consent needed (stores the choice itself) |
fbevents.js + _fbp | Meta Platforms (third party) | Advertising measurement: page views of public marketing pages only. Loads ONLY after you click Accept. | _fbp: ~90 days | Script + cookie — non-essential | Only with consent |
2. How consent works here
- Nothing non-essential loads before you choose. "Decline" and "Accept" are presented with equal prominence and there are no pre-ticked boxes.
- Your choice is stored in your browser (
bs_ads_consent) and logged on our side with a timestamp and the version of the consent text, as proof of your decision. - You can change your mind any time with the button below or the "Cookie settings" link in the footer — declining after accepting stops the pixel on your next page load.
3. Embedded content and other third parties
- YouTube tutorials (help page): video embeds are click-to-load. No request goes to YouTube/Google until you press play on a video; playback then uses YouTube's privacy-enhanced (no-cookie) player, which may still set storage on YouTube's own domain per Google's policies.
- Polar checkout: payment happens on polar.sh, Polar's own site with its own cookie policy. Our pages load no Polar script.
- Cloudflare: our host. We do not use Cloudflare Web Analytics, Turnstile or similar scripts on our pages; Cloudflare may set security cookies when protecting the site from attacks, which are strictly necessary.
- No others: no Google Analytics, no external fonts, no ad networks, no social widgets.
4. Contact
Questions about this policy: privacy@drawlytic.com. See also the Privacy Policy.