Cookie Policy
Last updated: 3 September 2026
This page lists every cookie and similar technology we can place on your device, who provides it, what it is for, and how long it lasts.
Change your choice at any time
Your current selection is stored for six months. You can review or withdraw it whenever you like — withdrawing is exactly as easy as giving, and takes effect immediately.
1. What we ask permission for, and what we don't
Storing information on your device — or reading information already there — needs your prior consent under Article 5(3) of the ePrivacy Directive, as implemented in each EU and EEA country we sell into. The single exception is storage that is strictly necessary to deliver the service you actually asked for.
We are established in the United States, where the rule is weaker: state privacy laws give you a right to opt out of tracking rather than a right to be asked first. We ask first everywhere anyway, because running one banner honestly is better than running two and getting the geography wrong. We also honour a Global Privacy Control signal from your browser as an opt-out, wherever you are.
So: the cookies in the "strictly necessary" table below are set without asking, because without them you could not stay signed in or complete a payment. Everything else is off until you switch it on. If you never answer the banner, nothing optional is ever loaded — we do not treat silence, scrolling, or continued browsing as consent.
2. Strictly necessary — no consent required
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| better-auth.session_token | Joinly (first party) | Keeps you signed in to your account. | Session lifetime |
| joinly_consent | Joinly (first party) | Stores the cookie choice you made on this page, so we can honour it and stop asking. Without it we would have to ask on every page load. | 6 months |
| NEXT_LOCALE | Joinly (first party) | Remembers the language you chose. | 1 year |
| theme | Joinly (first party) | Remembers whether you prefer the light or dark appearance. | 1 year |
| __stripe_mid, __stripe_sid | Stripe Payments Europe, Ltd. | Fraud prevention on the payment pages. Set by Stripe when a payment form is shown; required to process a payment securely. | 1 year / 30 minutes |
3. Functional — consent required
Optional conveniences. Declining them changes nothing about how the site works — our own support chat is in the strictly necessary section above and is always available; this section covers a third-party chat tool we may load in addition to it.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| crisp-client/* | Crisp IM SAS (France) | Keeps your support-chat conversation open across page loads and reconnects you to the same conversation. | 6 months |
4. Analytics — consent required
Helps us see which pages are used and where people get stuck. Our analytics runs in PostHog's EU region, so the data stays in the European Union. We do not use analytics data to target advertising, and we do not sell it.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| ph_*_posthog | PostHog (EU region — eu.i.posthog.com) | Distinguishes one browser from another so page views can be counted and grouped into a visit. Used to see which pages are used and where people abandon a flow. | 1 year |
5. Marketing and affiliate attribution — consent required
If you followed a link from one of our affiliate partners, this records that fact so the partner can be paid if you later subscribe. Declining does not affect the price you pay or your ability to subscribe.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| rewardful.referral | Rewardful (Coding Ventures Inc.) | Records that you arrived through an affiliate partner's link, so the partner can be credited if you later subscribe to a paid plan. | 60 days |
6. Browser controls
You can also block or delete cookies in your browser settings, and most browsers let you refuse third-party cookies entirely. Blocking strictly necessary cookies will break signing in and paying. Note that browser settings are a blunt instrument — the controls on this page are the ones that actually govern what we load.
One browser setting we do act on directly: if your browser sends a Global Privacy Control signal, we record that as an opt-out from every optional category and never show you the banner. You can still switch a category on from Cookie settings afterwards — an explicit choice you make here takes precedence over the signal.
7. Changes and contact
If we add a vendor or a new purpose, we publish a new version of this policy and ask you again — a consent given against an older version does not carry over. For questions about cookies, or to exercise any of your data protection rights, contact us at TODO. See also our Privacy Policy, which explains your rights and how to complain to your national supervisory authority.