Cookie Policy

1. What this covers

A cookie is a small file a site asks your browser to keep and send back on later visits. Browsers offer two more stores that work similarly — local storage and session storage — and the law treats all three the same way, so all three are listed here.

Consent is needed for anything that is not strictly necessary to provide the service you asked for. On Packdroid exactly one thing falls into that group: analytics. Everything else below is either required for the site to work or required to take a payment.

2. How your choice works

On your first visit you get a notice with two equally weighted answers — Accept all and Reject all — and a Manage preferences panel where analytics can be switched on or off on its own. Nothing optional runs until you choose; refusing leaves the site fully functional.

You can change your mind at any time from the Cookie settings link at the bottom of every page. Withdrawing analytics tells Google to stop storing anything, stops us sending events, deletes the analytics cookies we can reach, and reloads the page so the analytics script is no longer running at all.

• Your choice is stored for 180 days, after which we ask again. A refusal is stored for exactly as long as an acceptance, so saying no does not mean being asked again tomorrow.
• If we change the categories or the parties behind them, the stored choice stops counting and you are asked again against the new policy.
• The choice is stored in a cookie rather than in local storage so our server can read it while building the page. That is what lets the page load without analytics from the very first byte, instead of loading it and then stopping.

3. Strictly necessary — always on

These are set because the service cannot be delivered without them. They are not used to profile you and carry no switch.

• __packdroid_session — keeps you signed in. HttpOnly, so page scripts cannot read it, and signed so it cannot be forged. Expires after 30 days.
• __packdroid_oauth — exists only during a Google sign-in, for about ten minutes, and protects that sign-in against cross-site request forgery.
• __packdroid_consent — remembers the choice you made on this page's banner, along with the policy version and the date. First-party, 180 days, no identifier of any kind in it.
• Paddle — our payment provider and merchant of record. On the pricing page and in checkout, Paddle sets its own cookies to run the checkout, calculate the right sales tax for your country, and detect fraudulent payments. That is a legal and financial obligation attached to taking a payment, so it is not optional; Paddle's own cookie notice describes them in detail.
• Cloudflare — sits in front of the site and sets bot-protection cookies such as __cf_bm to tell real browsers from automated traffic. Cloudflare also measures page performance for us, but that measurement is cookieless and does not identify you.

4. Analytics — off unless you allow it

Google Analytics 4 tells us which templates people open, where the studio loses them, and which pages are worth writing more of. It is not advertising, it is not sold on, and Packdroid behaves identically whether it is on or off.

• _ga — distinguishes one browser from another. Set by Google, lasts up to two years.
• _ga_T546ZJ8N1R — holds the state of your current session for this property. Set by Google, lasts up to two years.
• Nothing loads before you allow it. The Google script is not on the page at all until you accept, so no request reaches Google and no measurement is taken in the meantime.
• When you withdraw consent we expire both cookies. Because they are written by Google's script rather than by us, removal is best effort — anything we cannot reach simply expires on its own, and no further data is collected either way.

5. Browser storage we use instead of cookies

These stay in your browser and are never sent to us. They exist to make the tool remember what you were doing, which is why they need no consent — but they are listed so the inventory is complete, and clearing your site data removes them.

• packdroid:locale — the language you last chose, so the switcher can offer it again. It never redirects you on its own; the URL always decides the language of the page.
• product-tour:dieline-preview:v1 — records that you finished the studio walkthrough, so it is not offered twice.
• packdroid:studio-exports:v1:… — the recent export list in the studio: template, dimensions, file name and time, for the last 40 exports of your account. It stays on your device.

6. Managing cookies in your browser

Alongside the controls on this site, every browser can block or delete cookies for a site, and most can do it for third parties only. Blocking the strictly necessary ones will sign you out and prevent checkout from completing; blocking analytics does nothing but reproduce the choice you can make here.

7. Who to ask

Packdroid is operated by Insoften Yazılım A.Ş., the data controller for everything described above. For anything on this page, or to exercise your rights under the GDPR or KVKK (Law No. 6698), write to [email protected].

Our Privacy Policy covers the personal data behind these cookies — what we collect, why, who processes it, and how long we keep it.