Cookie Policy
This Cookie Policy explains how akanoodles holdings limited ("akanoodles", "we") uses cookies and similar local-storage mechanisms on the website at drop.akanoodles.com. It complements our Privacy Policy.
1. What is a cookie?
A cookie is a small text file stored on your device by your browser when you visit a website. Cookies let the site remember things between page loads (your login state, preferences, etc.). "Similar technologies" — including localStorage, sessionStorage, and IndexedDB — work the same way for the purposes of UK and EU privacy law (PECR, UK GDPR).
2. The Drop plugin sets no browser cookies
The Drop plugin runs inside Figma. It uses Figma's clientStorage API to remember your settings, your authentication tokens, and your design-system slot bindings within Figma's own storage. Figma's storage is governed by Figma's own privacy practices; we don't access it from any other origin.
3. Cookies set by drop.akanoodles.com
The website at drop.akanoodles.com is a static marketing site. It sets only strictly-necessary cookies. Strictly necessary cookies do not require your consent under PECR.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Bot management — blocks automated abuse of the site | 30 minutes (rolling) |
cf_clearance | Cloudflare | Records that you have passed a security challenge | 30 days |
These are first-party cookies set by Cloudflare on our behalf. They do not contain personal data identifiable to you and are not used for tracking across other sites.
4. Cookies on invoice payment pages
Drop is sold via signed Statement of Work (pilot) and licence agreement (annual licence), both invoiced. The marketing site does not host a payment flow. Where you settle an invoice by card, you may be sent a hosted Stripe Invoice link (invoice.stripe.com) which sets its own cookies to process the payment. Stripe's own privacy and cookie practices apply on that domain — see stripe.com/cookies-policy/legal.
5. Cookies we do not use
- No advertising or marketing cookies
- No third-party analytics cookies (Google Analytics, Hotjar, Mixpanel, etc.)
- No social-media tracking pixels (Facebook Pixel, LinkedIn Insight Tag, etc.)
- No A/B-testing cookies set without consent
We use product telemetry — see §3.1 of our Privacy Policy — but it lives inside the Drop plugin, not in browser cookies, and is consent-gated separately.
6. Your choices
You can block or delete cookies in your browser settings. Blocking strictly-necessary cookies on Cloudflare's bot-management cookies may cause additional security challenges but will not prevent you from reading the marketing pages or booking a pilot.
Useful links:
7. Changes to this policy
If we add new cookies — for example if we adopt analytics in future — we will update this page and, where required by law, ask for your consent before any non-essential cookies are set. The effective date at the top of this page will be updated.
8. Contact
Questions about this policy: [email protected].