Cookie policy

What we use

The Dromix application (sign-in, workspace, and administration) only uses cookies that are strictly necessary to provide a service you requested. The Dromix application does not use advertising or analytics cookies, and self-hosted Dromix installations use no analytics or tracking cookies either. There are no advertising or social-media cookies. The only optional cookies are Google Analytics cookies on the public dromix.net marketing website, set only after you consent (see “Google Analytics” below).

dromix_session

Purpose: authenticated session after you sign in. Type: strictly necessary. Duration: the organisation’s session hours, or remember-me days if you tick “keep me signed in”. Attributes: HttpOnly, SameSite=Lax, Secure in production. Legal basis: ePrivacy Art. 5(3) exception for a service explicitly requested; GDPR Art. 6(1)(b) for the account.

dx_qr

Purpose: ties a sign-in QR code to the browser that shows it, so the code only works there. Type: strictly necessary, set only when sign-in with a QR code is turned on and the sign-in page shows a code. Duration: 3 minutes, removed after sign-in. Attributes: HttpOnly, SameSite=Strict, limited to the QR sign-in endpoints, Secure in production.

Local and device storage

The browser or desktop app stores wrapped encryption keys (vault), chat UI preferences, ringtone choices per alert type, location-consent and cookie-notice flags. These are not third-party trackers. Clearing site data signs you out of the encryption vault on that device.

Google Analytics (dromix.net marketing website only)

On the public dromix.net marketing website only (the home page with pricing, the product configurator, and the contact page, including their /tr, /de, /ru, and /pl versions), and only after you click Accept in the cookie banner, Dromix uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: aggregated statistics on how the website is used, such as visits and pages viewed, so we can improve it. Google Analytics is not loaded before you consent, and it is never loaded on the legal pages, on sign-in, in the Dromix application, or on self-hosted Dromix installations. Data may be transferred to Google LLC in the USA under the EU-US Data Privacy Framework or standard contractual clauses. Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google’s privacy policy explains how Google processes this data.

Google Privacy Policy

_ga and _ga_<container-id>

Purpose: Google Analytics cookies that tell visits apart (_ga) and keep the session state (_ga_<container-id>, on dromix.net “_ga_89DRB9YL5Z”). Type: analytics, optional, set only after you accept. Duration: 2 years each. Scope: first-party cookies on dromix.net, read by Google Analytics.

dromix_analytics_consent

Purpose: stores your choice in the cookie banner (accepted or rejected) so the banner does not ask again on every page. Type: strictly necessary. Duration: 6 months, then the banner asks again. Attributes: first-party, SameSite=Lax, Secure in production. Set only on the dromix.net marketing website.

Withdrawing consent

You can withdraw or change your consent at any time with the “Cookie settings” link in the footer of the dromix.net marketing pages (home, configurator, and contact). Choosing Reject stops Google Analytics and deletes the Google Analytics cookies (_ga and _ga_<container-id>) from your browser. Withdrawal does not affect the lawfulness of processing before it. You can also delete cookies in your browser settings at any time.

How to control them

You can delete cookies in your browser settings. That will sign you out. Necessary cookies cannot be refused without breaking sign-in. You can withdraw optional location sharing under Security. The cookie banner records that you saw this notice.