Rounddrop

Cookies

Version 2026-10-18

This English version is a courtesy translation. If it differs from the Spanish version, the Spanish version prevails.

Updated on 19 October 2026.

Cookies are small files a website stores in your browser. Rounddrop uses technical cookies and storage: what is needed for the app to work, keep your session and stay protected; the law doesn't require asking your permission for those. On the public website (the home page, the help and the other information pages) we also use Google analytics cookies, only if you accept them. Inside the app, where your groups and expenses are, there are no analytics.

The cookies we use

  • cm-hub-production-session (ours): keeps your session while you use the app. Lasts 120 minutes of inactivity.
  • XSRF-TOKEN (ours): protects forms so nobody can submit them on your behalf. Lasts as long as the session.
  • remember_rounddrop_… (ours): keeps you signed in so we don't ask you for a code every time. Lasts up to 400 days or until you sign out.
  • __cf_bm (Cloudflare): if Cloudflare turns it on, it tells people from bots to protect the website. Lasts 30 minutes.
  • Bot check (Cloudflare Turnstile): when you ask for the sign-in code, Cloudflare may store technical data to carry out that check.
  • rd_consentimiento (ours): remembers whether you accepted or rejected the analytics cookies, so we don't ask you every time. Lasts one year.

Analytics cookies (only if you accept them)

On the public website we use Google Analytics, by Google Ireland Limited, to find out which pages are visited, from what kind of device and how people get to them, so we can improve the website. We only store its cookies if you tap «Accept» in the notice:

  • _ga (Google): tells one browser from another to count visits. Lasts 2 years.
  • _ga_C4C7MBDCRW (Google): keeps the state of the visit. Lasts 2 years.

If you don't accept them, no Google cookie is stored: Google Analytics only receives signals without identifiers (that a page was opened, without knowing who opened it), which it uses to estimate the number of visits. Google may also process this data from the United States, with the safeguards of the EU-US Data Privacy Framework.

You can change your mind whenever you want in «Cookie settings», at the bottom of any page of the website. If you reject them after accepting them, we delete them.

What the app stores on your device

These aren't cookies, but the law treats them the same way, and they are technical too:

  • To add expenses offline: your groups and the expenses not yet sent (in the "rounddrop" browser database), and who is using the device (rd-usuario).
  • To open quickly and offline: a copy of the app's files and of the offline page ("rounddrop-…" caches), and the language to show it in (rd-preferencias).
  • In the iPhone app: that you are in the app (rd-ios-nativa) and the identifier for sending you notifications (rd-token-apns).

All of this is deleted when you uninstall the app or clear the site's data in your browser.

Content from other sites

When you open an attached PDF, your browser downloads the PDF viewer from jsDelivr, which receives your IP address but doesn't store cookies.

How to delete or block them

You can delete or block cookies in your browser settings (Chrome, Safari, Firefox or Edge, under privacy or site data). If you block the technical ones, you won't be able to sign in to Rounddrop.

If this changes

If we add other cookies that aren't technical (for example, for advertising), we will ask for your permission before storing them, with the option to reject them as easy as the one to accept them, and we will update this page.