Cookie policy
Which cookies and local storage keys DroneJob MY uses for sign-in sessions, language preference and analytics, and how to control them.
Last updated 14/10/2026
DRONEPILOT MALAYSIA: COOKIE POLICY
Effective Date: 14 October 2026
Last Revised: 14 October 2026
Governing Standard: Personal Data Protection Act 2010 (PDPA) & Digital Privacy Regulations
1. WHAT ARE COOKIES AND TRACKING TECHNOLOGIES?
This Cookie Policy explains how DronePilot Malaysia ("DronePilot", "we", "us", or "our") deploys cookies, local web storage, session tokens, and related browser tracking mechanisms across our website `https://dronepilot.my/` and its client/pilot dashboards (collectively, the "Platform").
- Cookies are small text files placed on your computer, tablet, or mobile device by a web server when you navigate an online portal. They allow the Platform to distinguish your browser session from others, remember authentication tokens, and preserve your customized operational settings across page reloads.
- Local / Session Storage: Modern web applications frequently employ HTML5 Local Storage and Session Storage (such as client-side JWT token caching) to sustain active login states, cache geospatial mapping polygons, and facilitate instant UI responsiveness without round-trip database overhead.
2. WHY WE USE COOKIES
DronePilot relies on cookies and technical telemetry for distinct operational imperatives:
- Essential Identity & Security: Maintaining active session authorization via encrypted tokens (e.g., Supabase authentication) to protect pilot profiles, client contact details, and FPX payment requests.
- Operational Mapping & Polygons: Temporarily caching your drawn flight areas, GPS coordinates, and airspace calculation boundaries while drafting an RFP or reviewing an airspace assessment.
- Localization & Language Preferences: Remembering your selected interface language across sessions (English, Bahasa Malaysia, 中文, or தமிழ்).
- Performance & Diagnostics: Monitoring API latencies, upload failures on large deliverables (orthomosaics, point clouds, inspection reports), and platform load balancing across Malaysian regions.
3. CATEGORIES OF COOKIES DEPLOYED
We categorize the cookies and storage artifacts deployed on the Platform into four main classes:
A. Strictly Necessary Cookies (Essential)
These cookies are technically mandatory for the Platform to function securely. Without these, authentication dashboards, pilot verification checks, and escrow payment processing cannot operate.
| Cookie / Token Identifier | Provider / Domain | Purpose & Function | Lifespan |
|---|---|---|---|
| `sb-access-token` / `sb-refresh-token` | `dronepilot.my` (Supabase Auth) | Encrypted JSON Web Tokens (JWT) used to authenticate pilot and enterprise client user sessions. | Session / 30 Days (Rolling) |
| `__Host-csrf_token` / `csrf_protect` | `dronepilot.my` | Cross-Site Request Forgery (CSRF) mitigation tokens to protect forms, bidding submits, and payment calls from unauthorized exploitation. | Session |
| `fpx_session_state` | Payment Gateway Partner | Preserves transactional continuity during redirect handshakes to Bank Negara Malaysia-approved FPX banking portals. | Session |
B. Functional & Spatial Preferences
These items enable the site to retain customized preferences and spatial editor configurations during active mission drafting.
| Cookie / Storage Identifier | Provider / Domain | Purpose & Function | Lifespan |
|---|---|---|---|
| `dp_lang_pref` | `dronepilot.my` | Stores the user's explicit language preference (EN, MS, ZH, TA). | 1 Year |
| `dp_temp_polygon_cache` | Local Storage | Caches temporary flight area GPS vectors and coordinate boundaries in the browser so work is not lost if the tab is refreshed. | Session / Local Clear |
| `dp_ui_density` | `dronepilot.my` | Preserves operator dashboard view preferences (compact list vs. visual tile view for job boards). | 6 Months |
C. Performance & Diagnostics
These mechanisms record anonymous telemetry to help us identify performance bottlenecks, monitor script errors, and optimize mapping canvas rendering speeds.
| Cookie / Tracker | Provider / Domain | Purpose & Function | Lifespan |
|---|---|---|---|
| `_dp_perf_metrics` | `dronepilot.my` | Aggregates anonymous page render speeds, CAD 601 airspace scoring response latencies, and file upload error codes. | 30 Days |
| CDN / Asset Caching | Edge Network (`__l5e`, Cloudflare) | Caches static assets, web fonts, and compressed hero/category graphics to speed up regional loading speeds across Peninsular and East Malaysia. | Persistent / Cache Rule |
D. Third-Party Web Fonts & Translation Endpoints
When you load the Platform, static dependencies may interact with trusted third-party content delivery networks:
- Google Fonts (`fonts.googleapis.com` / `fonts.gstatic.com`): Serves optimized typographic resources.
- GTranslate CDN (`cdn.gtranslate.net`): Resolves localized script assets for multilingual support.
4. ESCROW & FINANCIAL SECURITY SAFEGUARDS
When you initiate milestone funding via Malaysian online banking (FPX) or execute an operator disbursement, temporary transaction tokens are passed securely to licensed payment intermediaries.
- Zero Storage of Banking Credentials: DronePilot never stores bank passwords, ATM PINs, or direct online banking credentials in cookies or local storage.
- All financial handshakes occur via encrypted, HTTPS/TLS 1.3 protocol channels, and session parameters terminate immediately upon payment status validation.
5. MANAGING & CONTROLLING YOUR COOKIES
5.1 Browser-Level Settings
You maintain the legal right to accept, limit, or refuse cookies on your device. Most modern web browsers allow you to modify your cookie preferences through their configuration panels:
- Google Chrome: `Settings` > `Privacy and security` > `Cookies and other site data`
- Mozilla Firefox: `Settings` > `Privacy & Security` > `Cookies and Site Data`
- Apple Safari: `Preferences` > `Privacy` > `Manage Website Data`
- Microsoft Edge: `Settings` > `Cookies and site permissions`
5.2 Consequences of Disabling Essential Cookies
Please be aware that if you adjust your browser to systematically block or clear all cookies and web storage:
- Authentication Failure: You will be unable to log in to your Pilot or Enterprise Client account.
- Escrow Interruption: You will not be able to execute or confirm milestone payments via FPX.
- Loss of Map Polygons: The boundary-drawing tool and automated airspace assessment will fail to preserve polygon coordinates between steps.
6. COMPLIANCE WITH MALAYSIAN PDPA 2010
Under the Personal Data Protection Act 2010 (PDPA), technical identifiers like persistent user IDs, IP addresses, or device fingerprints linked to an identifiable natural person constitute Personal Data.
- Processing Limits: Technical data captured via cookies is used strictly for the performance of platform contracts, verification of CAAM-compliant pilot sessions, cyber defense, and legitimate operational optimization.
- No Data Selling: We do not trade, sell, or rent cookie telemetry to third-party ad networks or brokers.
- Data Subject Rights: To exercise statutory rights of access, correction, or inquiry regarding any personal data associated with your browser or user account, refer to our comprehensive Privacy Policy.
7. AMENDMENTS TO THIS COOKIE POLICY
DronePilot reserves the right to amend this Cookie Policy periodically to reflect updates in our technical infrastructure, new regulatory requirements, or adjustments to our payment and mapping service providers. Any changes will be published directly on this page with an updated "Last Revised" date. Continued usage of the Platform following such modifications signifies your acknowledgment and acceptance of the revised terms.
8. CONTACT & TECHNICAL INQUIRIES
If you have questions regarding this Cookie Policy or the technical data practices of `dronepilot.my`, please direct your communication to:
- Entity: DronePilot Malaysia Compliance Desk
- Designation: Data Protection & Technical Compliance Officer
- Jurisdiction: Petaling Jaya, Selangor Darul Ehsan, Malaysia
- Email: `support@dronepilot.my`
See all legal & policy documents.