Cookie Policy

ScrollLaunch takes a minimalist approach to cookies:

• No advertising cookies.
• Cookie-free analytics via Datafa.st and Ahrefs Web Analytics - no cookies set.
• Analytics cookies via Google Analytics 4 (Google LLC) - first-party measurement cookies such as _ga for aggregate traffic reporting only, not for ads.
• Affiliate referral cookie via Affonso - first-party affonso_referral so partner commissions can be attributed when you buy a paid feature after clicking an affiliate link. Lifespan: 30 days.
• No cross-site fingerprinting.
• A small set of strictly necessary first-party cookies for login and CSRF protection.

These cookies are required for the Service to function. They are set by us on the www.scrolllaunch.com domain and cannot be disabled without breaking sign-in.

• next-auth.session-token / __Secure-next-auth.session-token - your signed-in session. HttpOnly, Secure, SameSite=Lax. Lifespan: 30 days from last activity.
• next-auth.csrf-token / __Host-next-auth.csrf-token - CSRF double-submit token used by NextAuth. Session-only.
• next-auth.callback-url / __Secure-next-auth.callback-url - preserves the post-login redirect target. Session-only.
• next-auth.pkce.code_verifier - short-lived OAuth PKCE verifier. Cleared after sign-in completes.

We use cookie-free analytics plus Google measurement cookies to understand aggregate traffic:

• Datafa.st - privacy-first, cookie-free analytics loaded on every page. Does not set cookies.
• Ahrefs Web Analytics - cookie-free SEO and traffic analytics operated by Ahrefs Pte. Ltd. Does not set cookies.
• Google Analytics 4 - operated by Google LLC. May set first-party cookies such as _ga and _ga_* to distinguish sessions and count page views. Typical lifespan: up to 2 years (Google's default). Used for aggregate traffic reporting only - not for advertising or remarketing. You can opt out via Google's Analytics Opt-out Browser Add-on or by blocking analytics cookies in your browser settings. See Google's Privacy Policy.

When you arrive via a partner referral link (query param atp), we set a first-party cookie so a later paid purchase can be credited to that partner:

• affonso_referral - opaque referral ID from Affonso. First-party on the www.scrolllaunch.com domain. Lifespan: 30 days. Used only to attribute commissions on Dodo Payments checkouts (Premium, ads, directory plans, newsletter sponsorship including Medium articles). Not used for advertising or cross-site tracking. See the affiliate program page.

We do not set third-party ad cookies. Other third-party embeds only load when you take an action that uses them:

• Dodo Payments - when you open a checkout page, their domain may set cookies required to process the payment. Governed by their cookie notice.
• Google (OAuth) - Google sets its own cookies on accounts.google.com when you authenticate. Governed by Google's cookie notice.

We occasionally store small amounts of data in the browser's localStorage for UX reasons (e.g. remembering whether you dismissed an onboarding banner or which tab you had open on the dashboard). These are first-party, contain no personal identifiers, and can be cleared at any time from your browser settings.

Most browsers let you block or delete cookies via their settings. If you block strictly-necessary cookies, sign-in and checkout will not work. Useful links:

• Chrome cookie settings
• Firefox cookie settings
• Safari cookie settings
• Edge cookie settings