Legal · Cookies
Cookie Policy
Last updated: October 25, 2026
We use what MentorDrop needs to work. Analytics and advertising are optional and depend on your region and your choice.
The short version
Necessary
Session, security, preferences and the features you ask for.
Analytics
DataFast measures the public site and a few activation milestones with pseudonymous identifiers.
Advertising
Meta measures campaigns and the registration, trial and purchase conversions. Neither receives questions, answers or account content.
Your preferences
Change each purpose here, block cookies in your browser or enable Global Privacy Control. Blocking necessary cookies breaks sign-in and security features.
DataFast analytics
The preference lasts 12 months. Disabling clears the session identifiers and sets DataFast’s ignore value.
Analytics is enabled by default in your region.
Meta advertising
Controls Meta Pixel on mentordrop.com and its subdomains. Disabling removes the accessible _fbc/_fbp cookies and stops new browser events.
Meta measurement is enabled by default in your region.
Your region and your choice
Where this applies
DataFast measures the marketing pages of mentordrop.com (home, Q&A tool, Cookie Policy, registration) and the public documentation.
Meta measures page views on those marketing pages, not on the documentation, and three conversions: CompleteRegistration on your new account’s sign-in page right after you register, StartTrial on the first Studio page after you verify your email, and Purchase on the purchase confirmation page in Studio.
We do not measure browsing on client pages, questions or answers.
In the EU/EEA, United Kingdom, Switzerland, Brazil and the listed European territories, optional scripts load only after you accept. If we cannot tell your country, we ask first too. In the United States and other opt-out territories, limited measurement may start by default, based on our legitimate interest in knowing which pages and campaigns bring customers, until you disable it. Everywhere we respect rejection and Global Privacy Control, which also counts as an opt-out of targeted advertising where that applies.
Necessary technologies
They support access, security and the features you request; the analytics and advertising controls do not affect them.
Cloudflare Turnstile checks public forms for bots. It processes IP and browser signals, never the form fields, and may use its own technical storage, with durations set by Cloudflare. Cloudflare Turnstile privacy
mentordrop-session
Your session in the site, Studio or client pages.
2 hours after the last activity
XSRF-TOKEN
Protects forms against cross-site forgery.
2 hours after the last activity
MENTORIZE_LB
Hetzner load balancer: keeps your requests on the same server.
Browser session
remember_web_*
Keeps you signed in after signing in to your client pages with an email code, or after ticking “Remember me” in Studio.
400 days
mentordrop-analytics, mentordrop-marketing
Your analytics and advertising choices.
12 months
mentordrop-capture-video-*
On a video page that asks for an email: remembers that this browser already left one. No name or email.
12 months
mentordrop-capture-event-*
On an event that asks for an email: remembers which registration this browser holds (a number, no name or email), also for a recording kept for registrants, and holds your Kit subscriber id, encrypted, so the account holder can tag that you entered. “Not me” deletes it.
12 months
mentordrop-event-attended-*
On an event you entered without signing in, or whose attendance you checked with your email: remembers it in this browser, so you can watch a recording kept for attendees. No name or email.
12 months
mentordrop-remembered-visitor
Only if you tick “Remember me” on a video’s form: your name and email, encrypted, so the same professional’s other videos and events recognise you. “Not me” or “Forget me” deletes it.
12 months
Bunny Stream player
Plays Library videos; the player (player.mediadelivery.net) may keep playback settings such as volume.
Set by Bunny.net
crisp-client/*
Support chat on the marketing site and in Studio, loaded only after you click the chat button; if you are signed in to Studio, Crisp receives your name and email.
Up to 6 months, renewed while you use it
DataFast analytics
A cookieless script on public pages derives a short-lived pseudonymous identifier from IP address, user agent, domain and a salt that changes about every 24 hours. It keeps the values below in the browser.
If measurement was allowed when you registered, we keep the visitor and session identifiers with your account and use them to report workspace_created, free_trial, first_session_created, first_question_received, first_answer_sent, purchases and renewals, and include them in Polar metadata. We never send names, email, subdomain, questions, answers or account content. Rejecting before registration stores nothing. To withdraw later: Studio › Settings › General (immediate) or the control above (applied the next time an administrator of the account opens Studio). Withdrawal deletes the stored identifiers, also from your Polar subscription so renewals no longer carry them; events already reported, or a payment of a checkout you had already opened, stay with DataFast. Withdrawal does not affect the lawfulness of earlier processing; you may ask us to request deletion.
For requests whose user agent identifies as a known crawler, the server may report the URL without parameters, IP, user agent and HTTP status. Rejection and Global Privacy Control block this report.
datafast_visitor_id
Pseudonymous visitor identifier (session storage).
Current tab
datafast_session_id
Groups the measured session (session storage).
Current tab
datafast_pageview_state
Avoids counting a page view twice (session storage).
Current tab
datafast_ignore
Set when you reject, so the script stays off (local storage).
No expiry
Meta advertising measurement
When allowed, Meta Pixel measures page views on public pages and the CompleteRegistration, StartTrial and Purchase events. To deduplicate and attribute, the Conversions API receives the event, the page URL, IP address, user agent, _fbc/_fbp, and SHA-256 hashes of your email, first name and account id; purchases add amount, currency and product. IP, user agent and advertising identifiers are sent without hashing; the data are pseudonymous, not anonymous. We never send passwords or account content.
Withdraw as above; stored attribution is used for at most 90 days after it was allowed, which is not the same as being deleted: its pseudonymous identifiers stay in the account settings, unused, as a record of the choice while the account exists. Withdrawal does not affect earlier processing; you may ask us to request deletion.
_fbp, _fbc
Meta browser and click identifiers.
Up to 90 days, set by Meta
mentordrop-meta-registration
Links your registration to its browser event.
30 minutes
mentordrop_meta_event_* (local storage)
Prevents a duplicate conversion; cleared on the next event or when you disable Meta.
7 days
On client pages · Providers and transfers
DataFast does not measure browsing on customer subdomains; it may receive only the milestones above if your account keeps the registration identifier. Meta sends no page views from Studio or client pages.
DataFast is provided by JustShipIt Pte. Ltd., Singapore; Meta by Meta Platforms Ireland Ltd., with processing in the United States. Their safeguards are listed in the Privacy Policy.
Changes
We update this page when technologies, providers or the law change; the date above identifies the version.
Any questions?
Write to us about cookies or privacy at hello [at] mentordrop.com.