Legal
Cookie Policy
The cookies and browser storage DropMarket uses, what each one is for and how long it lasts, and how to control them.
- Effective
- 1 July 2026
- Last Updated
- 10 October 2026 · v1.3
- Governing Law
- England & Wales
Issued by DropMarket Ltd · Company No. 17309867 · support@dropmarket.gg
This policy explains the cookies and similar technologies (such as your browser’s local and session storage) that DropMarket uses. We use strictly necessary cookies, which keep you signed in and secure, and functional browser storage that remembers things you asked for, such as a draft listing. Analytics cookies are optional: we set them only if you click Accept on our cookie bar. We do not use advertising cookies.
Cookies we set
- Purpose
- Keeps you signed in and secures your session (Supabase authentication)
- Duration
- Up to 400 days, or until you sign out
- Type
- Strictly necessary
- Purpose
- Completes a sign-in, email-confirmation or password-reset link securely
- Duration
- Until that step completes
- Type
- Strictly necessary
- Purpose
- Recognises you across visits so we can see which steps of buying and selling people finish (PostHog). Set only if you click Accept
- Duration
- 1 year
- Type
- Analytics (optional)
| Name | Purpose | Duration | Type |
|---|---|---|---|
| sb-[project]-auth-token (may be split into .0, .1 parts) | Keeps you signed in and secures your session (Supabase authentication) | Up to 400 days, or until you sign out | Strictly necessary |
| sb-[project]-auth-token-code-verifier | Completes a sign-in, email-confirmation or password-reset link securely | Until that step completes | Strictly necessary |
| ph_[project]_posthog | Recognises you across visits so we can see which steps of buying and selling people finish (PostHog). Set only if you click Accept | 1 year | Analytics (optional) |
Browser storage we use
- Purpose
- Remembers your profile and seller status so pages open signed in without a flash
- Duration
- Until you sign out
- Type
- Functional
- Purpose
- Holds the avatar you picked at sign-up until your account is ready
- Duration
- Removed once uploaded
- Type
- Functional
- Purpose
- Saves your seller application draft on this device
- Duration
- Until you submit or clear it
- Type
- Functional
- Purpose
- Remembers the games you recently listed in
- Duration
- Until you clear site data
- Type
- Functional
- Purpose
- Remembers that you closed or used the seller checklist
- Duration
- Until you clear site data
- Type
- Functional
- Purpose
- Keeps your listing draft if the page reloads
- Duration
- Until you close the tab
- Type
- Functional
- Purpose
- Keeps your place in the sign-up-to-sell steps
- Duration
- Until you close the tab
- Type
- Functional
- Purpose
- Shows the right message when you come back from a payment page
- Duration
- Until you close the tab
- Type
- Strictly necessary
- Purpose
- Reloads the page once when a new version of the site is released
- Duration
- Until you close the tab
- Type
- Strictly necessary
- Purpose
- Remembers whether you accepted or rejected optional analytics cookies
- Duration
- Until you clear site data or change your choice
- Type
- Strictly necessary
- Purpose
- PostHog keeps a copy of its analytics ID here. Set only if you click Accept
- Duration
- Until you clear site data or reject
- Type
- Analytics (optional)
| Key | Purpose | Duration | Type |
|---|---|---|---|
| gamevault_user_profile, gamevault_seller_status, gamevault_seller_app_status | Remembers your profile and seller status so pages open signed in without a flash | Until you sign out | Functional |
| dm_pending_signup_avatar | Holds the avatar you picked at sign-up until your account is ready | Removed once uploaded | Functional |
| dm_seller_app_draft_v1 | Saves your seller application draft on this device | Until you submit or clear it | Functional |
| gv_sell_recent_games | Remembers the games you recently listed in | Until you clear site data | Functional |
| dm-seller-onboarding-dismissed, dm-seller-onboarding-shared | Remembers that you closed or used the seller checklist | Until you clear site data | Functional |
| gv_sell_wizard_snapshot | Keeps your listing draft if the page reloads | Until you close the tab | Functional |
| dm.signup-to-sell | Keeps your place in the sign-up-to-sell steps | Until you close the tab | Functional |
| paid-return:[order] | Shows the right message when you come back from a payment page | Until you close the tab | Strictly necessary |
| dm.stale-build-reload | Reloads the page once when a new version of the site is released | Until you close the tab | Strictly necessary |
| dm.analytics.consent | Remembers whether you accepted or rejected optional analytics cookies | Until you clear site data or change your choice | Strictly necessary |
| ph_[project]_posthog (local storage copy) | PostHog keeps a copy of its analytics ID here. Set only if you click Accept | Until you clear site data or reject | Analytics (optional) |
Analytics and error monitoring
We count page views with Vercel Web Analytics, which sets no cookies and stores nothing on your device; it reports aggregated visit data. Our error monitoring (Sentry) also sets no cookies.
We use PostHog to see which steps of buying and selling people complete and which buttons they click, so we can fix the ones where they get stuck. By default it runs without cookies and stores nothing on your device. If you click Accept, it also sets the cookie listed above and records your visit as a replay of the page (what you clicked and scrolled), with everything you type masked so it is never recorded. It never receives your email or name. Its data is hosted in the EU.
Other sites
Payment pages run by our payment processors, and sites we link to (such as Trustpilot or Discord), set their own cookies under their own policies.
Your choices
The first time you visit, a small bar asks whether you accept optional analytics cookies, with equally prominent “Accept” and “Reject” buttons. Nothing optional is set until you click Accept; if you ignore the bar or click Reject, analytics stays cookieless. You can change your choice at any time with the “Cookie Settings” link at the bottom of every page, and we also honour Global Privacy Control signals from your browser as a Reject. You can block or delete cookies and site data in your browser settings; if you block the sign-in cookies, you will not be able to sign in.
This reflects PECR as updated by the Data (Use and Access) Act 2025 (in force from 5 February 2026) and the ICO’s finalised storage-and-access-technologies guidance (April 2026).
Related Policies
- Privacy PolicyHow DropMarket Ltd collects, uses, shares and protects personal data under UK GDPR and the DPA 2018, including KYC data, the providers we use, how long we keep data, transfers and your rights.
- Terms of UseThe master terms governing use of the DropMarket platform: our venue role, SafeDrop Protection and payments, eligibility, accounts, consumer rights, liability, and governing law.