# Cookie Policy - Crawlfix AI

Last updated: 2026-05-12

This is the Cookie Policy for crawlfix.ai. Cookies are small text files that a website asks your browser to store. They let a site remember things between page loads and visits, such as whether you are signed in and what your preferences are.

## Cookie Categories

Crawlfix groups cookies into three categories:

- Necessary: Always on. Covers the session cookie that keeps you signed in after a magic-link login, CSRF tokens, and short-lived anonymous-unlock cookies. The site cannot function without these.
- Analytics: Opt-in. Privacy-aware first-party page-view tracking. No IP addresses stored, no device fingerprinting, no data shared with ad networks.
- Marketing: Not used. Crawlfix does not set marketing or advertising cookies.
- Functional: Opt-in. Preference storage for UI options like dismissed banners and remembered plan choices.

## Managing Your Cookie Preferences

The in-site cookie banner gives you three buttons: Accept, Reject, and Manage.

- Accept opts you in to analytics and functional cookies
- Reject keeps only strictly necessary cookies
- Manage expands a granular panel where you can toggle Analytics and Functional independently

You can reopen the consent panel at any time from the Cookie preferences link in the site footer. You can also clear or block cookies from your browser at any time using its built-in privacy controls.

## Third-Party Cookies

We use very few third-party cookies. Crawlfix does not set third-party tracking cookies on the marketing site or in the dashboard.

- Stripe: sets its own cookies only on the payment pages it hosts, for fraud prevention only
- Cloudflare: may set a short-lived security cookie (__cf_bm) for bot mitigation, not for advertising

## Cookie Retention

- Necessary session cookies: cleared when you sign out or after 30 days of inactivity
- CSRF tokens: cleared at the end of the browser session
- Anonymous-unlock cookies: 24 hours from issuance
- Analytics cookies (opt-in): 12 months from the last visit
- Functional preferences (opt-in): 12 months
- Cloudflare __cf_bm: 30 minutes from the last request

## Global Privacy Control

We honor the Global Privacy Control (GPC) browser signal as an opt-out signal. When your browser sends Sec-GPC: 1, Crawlfix records your visit as having opted out of optional analytics and functional cookies. The cookie banner is not shown to GPC-enabled visitors.

## Contact

Cookie questions go to Michael@faction.chat. See also the Privacy Policy at crawlfix.ai/privacy. Crawlfix is owned and operated by Faction Community, LLC.