Cookie policy
Version 2026-07-21 · effective 2026-07-21
Draft — legal wording pending review. The cookie table below is factual and current; the surrounding legal sections are placeholders for GreaseDesk to complete.
What we use
We run strictly-necessary cookies to keep the site working, one optional functional cookie (referral attribution), and — today — no analytics or advertising cookies. You choose the optional categories in the banner, and can change your mind any time via "Cookie settings".
| Cookie | Purpose | Category | Party | Lifespan |
|---|---|---|---|---|
__Secure-next-auth.session-token | Keeps you signed in (session) | Strictly necessary | First party | 90 days (rolling) |
__Host-next-auth.csrf-token | Protects the sign-in form (CSRF) | Strictly necessary | First party | Session |
__Secure-next-auth.callback-url | Returns you to the right page after sign-in | Strictly necessary | First party | Session |
gd_consent | Remembers your cookie choice | Strictly necessary | First party | 180 days |
gd_ref | Credits a reseller who referred you (referral attribution) | Functional | First party | 90 days |
| Cloudflare Turnstile | Anti-spam check on the contact & reseller forms only | Strictly necessary (security) | Third party (Cloudflare) | Short-lived |
| Stripe (checkout.stripe.com) | Payment/fraud on Stripe's hosted checkout — only if you subscribe | Strictly necessary (payment) | Third party (Stripe) | Stripe-set |
[LEGAL TODO: data controller identity, lawful basis for functional cookies (consent), how to withdraw consent, data-subject rights, third-party processor detail, retention. Legal review pending.]