DraftCookie policy
Last updated 4 November 2026
Draft uses one cookie, to keep you signed in. It uses no advertising cookies, no tracking cookies and no analytics cookies, so it does not need to ask for your consent first: the law allows cookies that are strictly necessary for a service you asked for.
The cookie
| Name | What it is for | How long |
|---|---|---|
__Host-draft_s | Keeps you signed in. It holds a random code and nothing readable. It is sent only to drafttool.org.uk, only over an encrypted connection, and cannot be read by scripts on the page. | 14 days, or until you press Sign out |
Things kept in your browser
The tool also keeps a few things in your browser’s own storage. They stay on your device and are not sent anywhere by themselves.
| Name | What it is for | How long |
|---|---|---|
researchpath-v2 | Your plan, so that work is not lost if the page is closed or the connection drops | Until you clear it, start again, or delete your plan |
researchpath-v2:theme | Whether you chose the light or dark look | Until you clear it |
draft.* (session storage) | Short notes that carry you through signing in, sending feedback or opening a file | Until the tab is closed |
Other companies
- Sign in with Google. The Google button is loaded from Google. If you use it, Google may use its own cookies, under Google’s cookie policy. Draft does not read them.
- Google Fonts. The typefaces come from Google’s servers. They set no cookies.
- Stripe. Payment pages are on Stripe’s own site, which uses its own cookies to prevent fraud, under Stripe’s cookie policy.
The usage totals described in the privacy notice are counted on Draft’s server and use no cookies.
Your choices
You can delete the cookie and browser storage at any time in your browser’s settings. Without the cookie you will be signed out; without the storage, a plan not yet saved to your account is lost. Questions: [email protected].