Cookie Policy
Every cookie we set, in plain English.
Last updated: May 28, 2026
We try to use as few cookies as possible. The list below is exhaustive - if it is not on this page, we are not setting it. We do not use third-party advertising or behavioral-tracking cookies today, and if that ever changes you will see them appear here first and in the consent banner.
Manage your preferences
You can change what you previously accepted (or withdraw consent entirely) here. The change takes effect immediately and persists for one year.
Essential cookies (always on)
These are required for the service to function. Without them, the form cannot save your work, payments cannot be processed, and our support team cannot sign in to help you. They do not require consent under either GDPR Article 6(1)(b) (contract performance) or US state privacy laws (necessary for the service requested).
| Name | Purpose | Retention |
|---|---|---|
| ld_consent | Records your choice on this banner so we do not ask again. | 12 months |
| lease-draft-{id} (localStorage) | Autosaves your form progress so refreshing or closing the tab does not lose your work. | Until you submit or 14 days, whichever comes first |
| ld_admin | Signed-in session for LeaseDrafts staff. Only set after a successful Google sign-in against the admin allowlist. | 30 days, /admin scope only |
| ld_oauth_state, ld_oauth_next | Short-lived CSRF protection for the Google sign-in flow used by staff. | 10 minutes, /admin scope only |
Analytics cookies (optional, off by default)
We use one first-party cookie to understand how people move through the form. This is what powers the “25 visited the form, 18 reached step 4, 11 paid” chart in our internal dashboard. The data lives in our own PostgreSQL database, is never sold or shared, and is automatically purged when the underlying submission is deleted.
| Name | Purpose | Retention |
|---|---|---|
| ld_session | Random UUID identifying your browser across pages. Linked server-side to a single Discord notification per session that updates as you progress (visit → form → submit → paid). No personal info is stored in the cookie itself. | 12 months |
| _ga | Google Analytics 4 — distinguishes browsers for aggregate session counts. IP addresses are anonymized server-side by Google (anonymize_ip=true). | 24 months |
| _ga_H43WR3JRBL | Google Analytics 4 session state for our specific property (measurement ID G-H43WR3JRBL). | 24 months |
| _gid | Google Analytics — distinguishes users for a 24-hour window. | 24 hours |
If you decline this category, no ld_session cookie is set, no Google Analytics script is loaded, no _ga* cookies are set, no events are recorded. The service works identically; we just stop seeing your funnel.
Advertising cookies (optional, off by default)
Not active today. We do not currently run a Meta Pixel, Google Ads tag, LinkedIn Insight tag, or any other third-party advertising script. The toggle on the consent banner exists so that when we eventually add one (likely the Meta Pixel for Facebook ads), it will only fire for users who have explicitly opted in.
When that changes, this section will list the specific cookies and you will be re-prompted on the consent banner.
Third-party processors (no cookies set on this domain)
The following services receive data when you use LeaseDrafts but do not set cookies on the leasedrafts.com domain:
- Stripe - payment processing. When you click Pay, you are redirected to checkout.stripe.com, which sets its own cookies under its own privacy policy.
- Resend - sends the lease PDF to your email. No client-side scripts.
- Anthropic - generates the lease text. Server-side only.
- Hetzner Object Storage - stores the generated PDF. Server-side only.
- Cloudflare - DNS and DDoS protection. May set a single session cookie (
__cf_bm) to identify bots; classified as strictly necessary under the EDPB’s 2023 guidance.
Our full data-processing relationships are listed in our Privacy Policy.
Questions? Email support@leasedrafts.com.