Cookie Policy

Last updated: June 26, 2026

TL;DR: We use only essential cookies to keep you logged in and to operate the live-chat / collaboration features. No advertising trackers, no cross-site tracking pixels, no Facebook/Google remarketing.

1. What Is a Cookie?

A cookie is a small text file placed on your device by your browser when you visit a website. Cookies let us recognize your session, keep you logged in, and operate real-time features. We also store your JWT authentication token in browser localStorage — not in a cookie — so it is sent only in the Authorization header of API requests and never to third parties.

2. Cookies We Set

Cookie	Purpose	Duration	Category
`uid`	Identifies your logged-in session (stores user ID only; the JWT lives in localStorage, not this cookie).	7 days	Essential (always on)
`guest_session`	Enables the guest editor (try-without-signup). Stores a server-side session reference only — no personal data.	24 hours	Essential
`io`	Set automatically by Socket.IO for real-time collaboration and live customer-support chat.	Session (cleared when the browser closes)	Essential
`landing_sid`	Distinguishes first-time landing-page visitors from returning visitors (aggregate analytics only; no personal identifier).	24 hours	Analytics / Functional

The first three cookies are strictly necessary for the service and cannot be disabled. landing_sid is analytics-only and carries no personal identifier; you may block it in your browser settings without affecting site functionality.

3. Third-Party Cookies

We use PayPal for payments. When you click "Pay with PayPal", PayPal may set cookies on its own domain to process the transaction. See PayPal's cookie policy. We do not control PayPal's cookies and do not share your SCIDraw data with PayPal beyond what is needed to process your payment.

We do not embed: Google Analytics, Facebook Pixel, Google Ads, Twitter Ads, LinkedIn Insight, or any advertising network. The only third party that ever sets cookies in connection with SCIDraw is PayPal, and only on its own domain during checkout.

4. Managing Cookies

Browser settings: all major browsers let you block or delete cookies in Settings → Privacy.
Logging out: clears your session state immediately (the uid cookie expires on logout).
Essential cookies (uid, guest_session, io) cannot be disabled — without them, you cannot log in, save work, or chat with support.
Analytics cookie (landing_sid) can be safely blocked; the site will still work, you just won't be distinguishable from a first-time visitor on the landing page.

5. Do Not Track (DNT)

We do not currently respond to browser DNT signals programmatically. However, because we set no advertising or cross-site tracking cookies regardless of DNT status, the practical effect on your privacy is the same. We may add explicit DNT handling in a future update.

6. EU / UK Users — ePrivacy Directive

Under the EU ePrivacy Directive and the UK Privacy and Electronic Communications Regulations (PECR), the strictly-necessary exemption covers our essential cookies (uid, guest_session, io) — no consent banner is required for these and none is shown.

The analytics cookie (landing_sid) carries no personal identifier and is limited to first-vs-returning visitor counting. Under PECR Regulation 6, this falls within the "strictly necessary" or low-risk analytics category that does not require prior opt-in consent. If you would prefer that it not be set, you can block it in your browser settings or by sending a Do-Not-Track signal — see Section 5.

7. Changes

If we add new cookies that fall outside the strictly-necessary category, we will update this page and display a consent prompt on your next visit where required by law.

Questions? Email support@scidrawio.com.