Cookie notice
Effective date: 25 October 2026
The public pages of drillmate.app (the landing and these documents) set no cookies and keep nothing in your browser's storage. They use no analytics, no advertising and no social-media widgets. The typeface is served from drillmate itself, so no request goes to another company. The waitlist form sends your email to our database and nothing else.
The web app sets these first-party cookies:
drillmate.session_token— your sign-in session, once you sign in, so you stay signed in. It is set by our API at api.drillmate.app for drillmate.app and its subdomains, and page scripts cannot read it (httpOnly). It ends when you sign out, or about a week after you last used drillmate.drillmate.locale— your language, for a year.drillmate.tz— your time zone, so that dates and times are shown in yours, for a year.drillmate.sidebar— whether you folded the sidebar.
In your browser's local storage the web app keeps your language, the last five pages you opened from search, which of your child's trophies you have already seen and, only between signing up and your first sign-in, the invitation code you entered and your sign-up details (email, the terms version you agreed to, the name of your club). All of it is strictly necessary for the service to work. It stores no analytics or advertising identifiers. Signing out removes the session.
The phone apps keep your session in the device's secure storage (iOS Keychain, Android Keystore). In the app's own storage they keep your language, a copy of what you last opened so that the app works on a weak signal (at most 7 days old, and cleared when you sign out), whether you use the family or the coach view, which trophies you have already seen and, between signing up and your first sign-in, the invitation code and your sign-up details.
Error reports. If the app fails, a report goes to Sentry with technical details and a pseudonymous account identifier. It contains no cookies, no name and no email.
Usage statistics. The web app and the phone apps send pseudonymous usage events to
PostHog's EU cloud (see the privacy policy, section 8). They set no cookie and keep no
identifier in your browser or on your device: the identifier lives only in memory
while the page or app is open. If you turn "Share usage data" off, that choice — and
only that — is kept (drillmate.analytics.off in local storage, or in the app's own
storage) so it holds next time.
Because nothing beyond strictly necessary storage is used, no consent banner is shown. If that ever changes, we will ask for consent first and update this notice.
Questions: privacy@drillmate.app