We keep this short because we keep cookies short. GiftMwah uses only what’s needed to run the site. There are no advertising cookies, no cross-site trackers, and nothing that needs your consent under the ePrivacy Directive or similar laws — so we don’t interrupt you with a banner.
Cookies we set
| Name | Purpose | Type | Expires |
|---|---|---|---|
better-auth.session_token | Keeps you signed in after you sign in with Google or an email link. | Strictly necessary | 30 days, extended while you use the site |
better-auth.state / better-auth.pkce | Protects the Google sign-in handshake against forgery. Only set while signing in. | Strictly necessary | Minutes |
__cf_bm | Set by our host Cloudflare to tell humans from bots and protect the site. | Strictly necessary (security) | 30 minutes |
Browser storage (not cookies)
Your browser’s local storage holds: lists you start before signing in (until you sign in and they’re saved to your account), the name you last typed when claiming a gift, and small preferences. This data never leaves your device unless you sign in. Clearing your browser’s site data removes it.
Third-party cookies after you leave
When you click a “Shop” link we send you to the retailer with a tracking code. The retailer — for example Amazon — may set cookies on its site so it can attribute your purchase to us. Those are governed by the retailer’s cookie policy, not ours. We don’t set any third-party cookies on GiftMwah.
Analytics
If we enable analytics we use Cloudflare Web Analytics, which is cookie-free and doesn’t fingerprint or identify visitors. If we ever add a tool that needs consent, we’ll ask first.
Managing cookies
You can block or delete cookies in your browser settings. If you block the session cookie you’ll simply need to sign in again each visit. Questions: support@giftmwah.com.