Keydrop
Log inSign up

Cookie Policy

Last updated October 25, 2026

Keydrop uses essential cookies and browser storage to provide sign-in, protect account requests, and let you recover encrypted responses to secret requests. This policy describes the customer web application; a deployment may change as the service evolves.

Essential session cookies

When you sign in or use protected account features, Keydrop sets first-party cookies to maintain your session and protect requests. In production their names begin with __Host-keydrop-; local development uses different names.

  • __Host-keydrop-access and __Host-keydrop-id hold authentication tokens and are HttpOnly, Secure, and SameSite=Lax in production.
  • __Host-keydrop-refresh supports session renewal. It is HttpOnly, Secure, and SameSite=Lax in production and is cleared when you sign out.
  • __Host-keydrop-csrf supports cross-site request protection. It is readable by the site's own scripts, SameSite=Strict, Secure in production, and expires after eight hours.

Authentication-cookie lifetime depends on the session token and sign-in state. These cookies are used for the service you request, not for advertising.

Browser storage for secret requests

If you create a secret request, Keydrop uses IndexedDB on your device to keep the requester's private key and a passphrase-encrypted recovery file. The private key is not sent to Keydrop. Keep the recovery file and its passphrase safe; if you clear browser site data or lose the file, you may be unable to decrypt a response. You can clear this storage using your browser's site-data controls.

Analytics and advertising

The customer application does not currently use advertising cookies or optional analytics cookies. If we introduce non-essential cookies or similar technologies, we will update this policy and obtain any consent required by applicable law before using them. You will be able to change or withdraw that consent where required.

Managing cookies and contact

You can block or delete cookies in your browser. If you block essential cookies, you may be signed out or unable to use protected account features. Clearing browser storage may remove your secret-request recovery key. For questions, email support@aptivedge.in. See the Privacy Policy for more information about data handling.