Cookie Policy
Last updated 08 Aug 2026 · Applies to CardLink and every card published through it.
This page lists every cookie and browser-storage key CardLink sets, and what each one does. The list is short because we run no advertising and no third-party analytics.
1. What we set
| Name | Type | Purpose | Expires |
|---|---|---|---|
CARDLINKSID |
Cookie — strictly necessary | Keeps you signed in. Without it, every page would ask for your password again.
Marked HttpOnly and SameSite=Lax, so scripts cannot read it
and other sites cannot send it. |
When you sign out, or after 120 minutes idle |
af-theme |
Local storage, and a cookie — preference |
Remembers whether you chose the light or dark theme. Stored in local
storage, and also as a cookie so the choice still survives a reload in
a private window or where site storage is blocked. It holds only the
word light or dark — it identifies nothing.
|
1 year, or until you clear your browser data |
af-cookie-consent |
Local storage — preference | Remembers that you dismissed the cookie notice, so it is not shown again. | Until you clear your browser data |
2. What we do not set
- No advertising or re-targeting cookies.
- No Google Analytics, Meta Pixel, or any other third-party tracker.
- No cross-site identifiers, and nothing that follows you to other websites.
- No cookies at all on a published card page for the person scanning it. A view is counted server-side without identifying the visitor.
3. Do you need to consent?
The session cookie is strictly necessary — it exists only because you asked to sign in, so it does not require consent under the ePrivacy rules. The two preference keys are set by your own choices in the interface. Because nothing here is used for tracking or advertising, the notice you see is informational rather than a consent gate.
4. Turning them off
Every browser lets you block or delete cookies and clear local storage, usually under Settings → Privacy. Blocking the session cookie will stop you signing in — that is not a fault, it is what the cookie is for. Clearing local storage simply resets your theme choice and brings the notice back.
5. Changes
If we ever add a cookie, it will be listed here before it ships, and the date at the top of this page will change.