Skip to content
DrawThink
Sign inTry it for 14 days

Cookie policy

Updated on November 4, 2026

The DrawThink website and workspace use cookies that are strictly necessary for them to work and, only if you accept, audience measurement that helps us improve them. No advertising and no social network trackers. This policy follows the recommendations of the French data protection authority (CNIL).

1. What is a cookie?

A cookie is a small file placed on your device by the website you visit; the browser’s local storage plays a similar role. The law treats both in the same way: those that are strictly necessary for the service you request do not require your consent, while the others do.

2. Necessary cookies

Session cookie

It keeps you signed in to your account. It is valid for 7 days, is extended while you use the service and is removed when you sign out.

Security cookies

Set for the duration of a sign-in step (two-factor authentication, signing in with Google or Microsoft), they protect it against tampering and expire within ten minutes at most.

Trusted device

If you tick “Remember this device for 30 days” during two-factor authentication, this cookie avoids asking you for the code again on that device for 30 days. It is only set at your request and serves no other purpose; deleting it simply means the code is asked for again.

Your cookie choice

Your answer to the banner (audience measurement accepted or declined, and its date) is kept in your browser’s local storage for 13 months, so that you are not asked again on every page.

These cookies belong to drawthink.app: they are not used for any tracking and are not read by any third party.

3. Your display preference

Your theme choice (light, dark, or your device’s setting) is kept in your browser’s local storage. It never leaves your device and is not sent to us; you can clear it at any time from your browser settings.

4. Audience measurement, with your consent

If you accept, we measure how the website and your workspace are used with PostHog, whose data is hosted in the European Union, to understand what helps and what gets in the way, and to improve DrawThink. Nothing is stored or sent before you agree.

  • Pages viewed, visit duration, landing page and any campaign it came from, device and browser type, and the city, region and country you connect from, derived from your IP address, which the measurement does not keep
  • Clicks on the public website, and where clicks land on each page (heatmaps)
  • Recordings of your sessions on the website and in your workspace: what you type and any text that identifies you or someone else are masked before sending; the administration console and pages opened from a personal link (invitation, password reset, authorizing a PC or an assistant) are never recorded
  • Errors your browser runs into
  • How fast pages display (loading, layout stability, responsiveness), without anything of their content
  • A visit identifier (cookie and browser storage whose name starts with ph_), kept for 1 year at most, and, once signed in, your account’s internal identifier and your language, never your name or email address

Page addresses are trimmed before sending: no identifier, personal link or search. Events are kept for 1 year, session recordings for 30 days. The plugin window in your design software never measures anything.

5. What our server records, without cookies

Regardless of your cookie choice, our server records the steps of your journey in PostHog: sign-up, trial start, subscription taken, changed or cancelled (the plan and its number of licences), PC authorized, AI assistant connected (the assistant’s domain), and each tool call made by your assistant (the tool and its action, its outcome and its duration, the assistant making the call). These steps are linked to your account’s internal identifier, without any content or setting. This tracking places no cookie on your device and is based on our legitimate interest in running and improving the service; you can object to it by writing to contact@drawthink.app.

7. What we do not use

  • No advertising cookies, no retargeting
  • No social network trackers
  • No sale or rental of your browsing data

8. Our partners’ pages

Payment and subscription management take place on Stripe pages, and signing in with Google or Microsoft on those companies’ pages. These pages are served on their own domains, with their own cookies and under their own policies.

9. Managing cookies

Besides “Manage cookies”, you can view and delete cookies from your browser settings. Blocking or deleting the session cookie signs you out: your account remains inaccessible for as long as that cookie is refused.

10. Your other data

For anything concerning your other personal data, please read our privacy policy

11. Contact

For any question about cookies, write to contact@drawthink.app.