Legal
Cookie policy
Every cookie this site can set, what it does, and how long it stays — with the ones you can refuse marked as such.
Last updated August 16, 2026
02What we set, and why
Strictly necessary
These make the service work. They cannot be switched off through a banner, because without them you cannot stay signed in or submit a form safely.
| Cookie | Purpose | Duration |
|---|---|---|
| db_session | Keeps you signed in between page loads | 30 days |
| db_csrf | Protects forms against cross-site request forgery | Session |
| db_consent | Remembers your cookie choices so we do not ask again | 12 months |
Preferences
| Cookie | Purpose | Duration |
|---|---|---|
| db_workspace | Remembers the last Pinterest account and view you had open | 12 months |
| db_tz | Stores the display timezone you selected | 12 months |
Analytics
Set only if you accept them. They tell us which features are used and where the product fails, in aggregate.
| Cookie | Purpose | Duration |
|---|---|---|
| db_analytics_id | Pseudonymous identifier used to count returning visits | 13 months |
| db_session_replay | Groups error reports belonging to a single visit | Session |
We do not set advertising or cross-site tracking cookies, and we do not sell data collected through cookies.
03Third-party cookies
- Our payment processor sets cookies on its own checkout pages to prevent fraud. Those pages are governed by the processor's policy.
- Connecting a Pinterest account sends you to Pinterest's own OAuth screen, where Pinterest sets its own cookies under its own policy.
- Embedded content, where present, may set cookies from the host of that content.
04Managing your choices
- The banner shown on your first visit lets you accept or reject everything that is not strictly necessary. Rejecting does not limit the service.
- You can change your choice at any time from the cookie settings link in the site footer.
- Your browser can block or delete cookies for any site. Blocking strictly necessary cookies will prevent you from signing in.
- Most browsers also offer a Do Not Track or Global Privacy Control signal; we treat an active GPC signal as a rejection of analytics cookies.
05Changes and contact
We update this policy when the cookies we use change. The date at the top reflects the current version. Questions go to privacy@dripboard.dev.