Cookie Policy
Last updated: 16 October 2026
1. What this policy covers
This policy explains how DrPlugin uses cookies and similar browser technologies on drplugin.com.
DrPlugin is operated by Virtueplanet Services LLP. This policy forms part of our Privacy Policy, which explains how we use personal data more generally.
Necessary cookies support sign-in, security, country selection, and your cookie choice. Google Analytics cookies are optional and are stored only if you consent. We do not currently use Google Ads or the Meta Pixel.
2. What cookies are
A cookie is a small text record that a website asks a browser to store. The browser returns it on later requests or makes it available to approved site scripts. Cookies can keep a user signed in, remember a preference, or distinguish one browser from another for analytics.
We also use similar technologies, such as local or session storage, where needed for temporary interface state. We do not use device fingerprinting to identify visitors.
3. Necessary cookies
These cookies support a service you request or record your privacy choice. They are not used for advertising.
drplugin-session(DrPlugin). Authenticates an account session. Duration: browser session, unless "remember me" is selected; a remembered cookie can remain for up to 30 days, while the server-side session can expire earlier.drplugin-csrf(DrPlugin). Protects account actions against cross-site request forgery. Duration: same browser lifetime as the related account session.__Host-drplugin-oauth(DrPlugin). Secures the return from Google or GitHub sign-in. Duration: up to 10 minutes and normally deleted after the sign-in attempt.drp_country(DrPlugin). Remembers the country selected for currency, tax, and payment routing. Duration: 90 days.drp_consent(DrPlugin). Records analytics and marketing cookie choices and the date of the choice. Duration: 180 days.
In local development, the OAuth cookie can appear as drplugin-oauth because the secure __Host- prefix requires HTTPS.
Cloudflare may set a short-lived security cookie when it needs to verify a request or remember the result of a security challenge. The name and duration depend on the Cloudflare service and security rule in use. Such a cookie is used for security, not advertising.
Blocking a necessary cookie can prevent sign-in, account forms, social sign-in, saved country selection, or saved cookie preferences from working.
4. Google Tag Manager and consent mode
Google Tag Manager manages the Google Analytics tag on the public site. Tag Manager is enabled only when we have configured it in our administration settings.
Our site uses Google's advanced consent mode. Before you make a choice, analytics storage and advertising storage are set to denied. In this state:
- Google Analytics cookies are not stored;
- Google tags can send cookieless measurements and consent-status signals to Google; and
- those signals can include the time, browser user agent, referrer, page information, consent state, and a random value generated for that page load.
If you reject analytics, analytics storage remains denied. If you accept analytics, the Google Analytics tag may store the cookies listed below and send fuller measurement data.
5. Optional analytics cookies
We use Google Analytics to understand which pages and features are used, how visitors reach the site, and whether the site works as expected. These cookies are stored only after you consent to analytics.
_ga(Google Analytics on drplugin.com). Distinguishes browser instances for visitor and usage measurement. Default maximum duration: up to 2 years, renewed on activity unless configured otherwise._ga_<container-id>(Google Analytics on drplugin.com). Maintains session state. Default maximum duration: up to 2 years, renewed on activity unless configured otherwise.
Google can change its cookie names, purposes, and defaults. Our configuration can also use a shorter period. The Google Analytics cookie documentation provides current provider details.
You can refuse analytics without losing access to the site, products, checkout, or your account.
6. Advertising cookies
We do not currently use Google Ads, the Meta Pixel, or advertising cookies.
If we introduce advertising measurement or remarketing, we will first update this policy, identify the relevant cookies and providers, and add a separate marketing choice to the consent controls. Advertising tags will require the relevant consent before they can use advertising storage.
7. Payment-provider cookies
Stripe processes every payment. You pay on Stripe Checkout, and you update a card or billing address in Stripe's billing portal. Both are pages on Stripe's own domains, not on drplugin.com, and we do not load Stripe scripts on drplugin.com pages.
On those pages Stripe may use cookies and similar technologies for payment security, fraud prevention, and transaction processing. Stripe controls those technologies, and its own notices apply when you use its pages:
8. Cloudflare Turnstile
We use Cloudflare Turnstile to protect sign-in, account recovery, and similar forms from automated abuse. Turnstile can process browser and interaction signals and may use strictly necessary storage to complete a challenge. It is not enabled for advertising by us.
9. Embedded YouTube videos
Documentation or articles may contain a YouTube video embedded through YouTube's privacy-enhanced domain, youtube-nocookie.com. This mode is intended to limit cookies before interaction, but loading or playing an embedded video still connects your browser to Google and can disclose request information such as your IP address, browser data, page address, and playback activity.
Google's own privacy terms apply to that processing. You can avoid the connection by not loading or playing the embedded content or by blocking it in your browser.
10. Your cookie choices
The consent banner provides controls for optional cookies. You can accept or reject analytics. Refusing must be as easy as accepting.
You can change your choice at any time through the Cookie preferences link in the site footer. A new choice replaces the existing drp_consent cookie. If we materially change the available categories, we will ask again.
You can also delete or block cookies through your browser. Browser controls normally appear under Privacy or Site Data. Blocking optional cookies does not prevent ordinary use of DrPlugin. Blocking necessary cookies can affect the functions described in section 3.
11. Do Not Track and similar signals
Some browsers send a Do Not Track signal. There is no single industry standard for responding to it. We use the choice recorded through our consent controls. Where applicable law requires recognition of another browser-based opt-out signal, we will honour it as required.
12. Changes to this policy
We will update this policy when our cookies, analytics configuration, or providers materially change. The date at the top identifies the current version.
We will update this policy before enabling Google Ads, the Meta Pixel, or another advertising technology.
13. Contact
For questions about cookies or privacy, contact Email address, shown when JavaScript runs.
Virtueplanet Services LLP, 3, Dr. Girindra Sekhar Bose Road, Flat-1B, Block-1, Signum Gardenia, Kolkata 700039, West Bengal, India.
Related documents: Privacy Policy, Terms of Service, and Refund Policy.