# Cookie Policy

> ScrollLaunch uses strictly-necessary session cookies, cookie-free analytics via Datafa.st and Ahrefs Web Analytics, first-party measurement cookies via Google Analytics 4, and an optional Affonso referral cookie (affonso_referral). No ads, no cross-site fingerprinting.

```yaml
url: "https://www.scrolllaunch.com/cookies"
last_updated: 2026-07-17
effective_date: 2026-04-24
operator: ScrollLaunch
jurisdiction: "Rajasthan, India"
governing_law: India
contact: "kalashvasaniya@gmail.com"
```

## Summary

- **No advertising cookies.**
- **Cookie-free analytics** via Datafa.st and Ahrefs Web Analytics — no cookies set.
- **Analytics cookies** via Google Analytics 4 (Google LLC) — first-party measurement cookies such as `_ga` for aggregate traffic reporting only, not for ads.
- **Affiliate referral cookie** via Affonso — first-party `affonso_referral` (30-day lifespan) so partner commissions can be attributed on paid checkouts.
- **No cross-site fingerprinting.**
- A small set of strictly-necessary first-party cookies for login and CSRF protection.

## Strictly necessary cookies

Set by us on the www.scrolllaunch.com domain. Cannot be disabled without breaking sign-in.

- `next-auth.session-token` / `__Secure-next-auth.session-token` — your signed-in session. HttpOnly, Secure, SameSite=Lax. Lifespan: 30 days from last activity.
- `next-auth.csrf-token` / `__Host-next-auth.csrf-token` — CSRF double-submit token used by NextAuth. Session-only.
- `next-auth.callback-url` / `__Secure-next-auth.callback-url` — preserves the post-login redirect target. Session-only.
- `next-auth.pkce.code_verifier` — short-lived OAuth PKCE verifier. Cleared after sign-in completes.

## Analytics cookies

- **Datafa.st** — privacy-first, cookie-free analytics loaded on every page. Does not set cookies.
- **Ahrefs Web Analytics** — cookie-free SEO and traffic analytics operated by Ahrefs Pte. Ltd. Does not set cookies.
- **Google Analytics 4** — operated by Google LLC. May set first-party cookies such as `_ga` and `_ga_*` to distinguish sessions and count page views. Typical lifespan: up to 2 years. Used for aggregate traffic reporting only — not for advertising. Opt out via [Google's Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout) or your browser's cookie settings. See [Google's Privacy Policy](https://policies.google.com/privacy).

## Affiliate referral cookie

When you arrive via a partner referral link (query param `atp`), we set a first-party cookie so a later paid purchase can be credited to that partner:

- `affonso_referral` — opaque referral ID from Affonso. First-party. Lifespan: 30 days. Used only to attribute commissions on Dodo Payments checkouts (Premium, Premium+, ads, directory plans). Newsletter sponsorship is invoice-only and not auto-attributed. See [Affiliates](https://www.scrolllaunch.com/affiliates).

## Other third-party cookies

We do not set third-party ad cookies. Other third-party embeds only load when you take an action that uses them:

- **Dodo Payments** — when you open a checkout page, their domain may set cookies required to process the payment. Governed by their cookie notice.
- **Google (OAuth)** — Google sets its own cookies on accounts.google.com when you authenticate. Governed by Google's cookie notice.

## Local storage & similar

We occasionally store small amounts of data in the browser's localStorage for UX reasons (e.g. remembering whether you dismissed an onboarding banner or which tab you had open on the dashboard). These are first-party, contain no personal identifiers, and can be cleared at any time from your browser settings.

## Managing cookies

Most browsers let you block or delete cookies via their settings. If you block strictly-necessary cookies, sign-in and checkout will not work.

- [Chrome cookie settings](https://support.google.com/chrome/answer/95647)
- [Firefox cookie settings](https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer)
- [Safari cookie settings](https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac)
- [Edge cookie settings](https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09)

## Changes

If we add new cookies, we will update this page and the "Last updated" date. Full context: [Privacy Policy](https://www.scrolllaunch.com/privacy).

_HTML version: https://www.scrolllaunch.com/cookies_