1. Scope
This policy applies to:
- website cookies,
- local storage,
- SDKs,
- mobile device identifiers,
- similar tracking/storage technologies.
2. Essential Technologies
Technologies needed for sign-in, security and the core services may be used without separate consent to the extent the law allows.
3. Analytics
Non-essential analytics technologies are loaded, where required, only after the user gives permission.
Analytics SDKs/cookies do not run by default before permission is given.
4. Marketing
Behavioural advertising or marketing technologies are enabled only after the necessary permissions are obtained. Dump does not currently use such technologies.
5. Choice Screen
In the web app (lets.dumpapp.io), the banner shown on the first visit offers the user, at the same level:
- Allow,
- Reject.
The banner asks for permission only for optional analytics technologies; no permission is asked for essential technologies. Analytics technologies are not loaded until the user answers. The answer is asked again after 12 months.
In the mobile app, the same choice is asked on first launch with the same two options.
The dumpapp.io promotional website does not use cookies, analytics or similar tracking technologies, so no banner is shown there.
6. Technologies Used
The table below covers the web app (lets.dumpapp.io).
| Technology | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| Session tokens (local storage) | Dump | Session | Until sign-out | Essential |
dump.deviceId (local storage) | Dump | Security (managing sessions per device) | Until browser data is cleared | Essential |
| Language, theme and interface preferences, dump draft (local storage) | Dump | Remembering preferences and the draft | Until browser data is cleared | Essential |
| Cookie choice (local storage) | Dump | Remembering the permission given | 12 months | Essential |
Network security and content delivery; a short-lived security cookie (e.g. __cf_bm) when security requires it | Cloudflare | Preventing attacks and abuse, delivering pages | Up to 30 minutes for the cookie | Essential |
| Google sign-in script (Google Identity Services) | Loading the script from accounts.google.com when the user presses the Google sign-in button, and authentication; Google may use its own cookies at that point | Period set by Google | Essential (at the user's request) | |
| Map library (local storage) | Mapbox | Making the map work | Period set by Mapbox | Essential |
| Push notification registration (service worker, IndexedDB; with browser permission) | Google (Firebase Cloud Messaging) | Notifications | Until the permission is removed | Essential |
_ga, _ga_* cookies and Firebase records (IndexedDB) | Google (Google Analytics, Firebase) | Analytics | 2 years; IndexedDB records until browser data is cleared | Optional |
Technologies not actually in use are not listed.
7. Mobile SDKs
Analytics, crash reporting and similar SDKs in the mobile app are also covered by this policy. In the mobile app, Firebase Analytics runs only with permission; Sentry receives error and performance records, and Mapbox the technical data needed for maps.
8. Changing Preferences
The user can later change their choice in the web app and the mobile app under Settings > Privacy > "Analytics on this device".
Users who are not signed in can reset their choice by clearing the site data in their browser; the banner is then shown again.