Effective 26 July 2026
Cookies Policy
GiftL uses browser storage only to operate the service, protect promotions, authenticate admins, and remember choices. It does not use advertising cookies.
1.What cookies and local storage are
Cookies are small text records a website places in your browser. Session cookies are removed when the session ends; persistent cookies remain until their expiry or until you delete them. Local storage is a similar browser facility but does not automatically expire. In this policy, “browser storage” covers both.
2.Storage used by GiftL
| Name | Purpose | Type | Duration |
|---|---|---|---|
giftl_device | Signed, opaque identifier used to detect repeated participation and abuse in protected campaigns. | Strictly necessary first-party cookie | 31 days |
giftl_device_backup | Restores the same protection identifier after ordinary cookie loss. It is not trusted by itself. | Strictly necessary local storage, protected campaigns only | Until site data is cleared |
locale | Remembers the selected language across the service. | Preference cookie | 1 year |
theme | Remembers the admin interface theme. | Preference local storage | Until site data is cleared |
| Auth.js session and callback cookies | Secures Google sign-in, preserves the login flow, and authenticates authorized administrators. | Strictly necessary first-party cookies | Session or the configured login-session lifetime |
The device items are created only when campaign play protection is enabled. They do not contain your phone number; the server stores a keyed cryptographic hash used for fraud prevention.
3.Google services
A campaign may load Google reCAPTCHA to distinguish legitimate participation from abuse. Google states that reCAPTCHA sets the necessary _GRECAPTCHA cookie for risk analysis. Google may receive device, browser, IP-address, and interaction information and determines its own cookie duration. Google Fonts requests font files from Google servers and may expose connection data such as your IP address. Admin Google sign-in uses Google’s own cookies on Google domains.
These services are governed by Google’s Privacy Policy and Terms.
4.Why there is no advertising-cookie banner
GiftL does not currently use advertising or cross-site analytics cookies. The storage listed above is used to deliver requested functionality, protect promotions, authenticate administrators, or remember an explicit preference. Where a deployment adds optional analytics, advertising, or other non-essential technology, it must request consent before activation and provide an equally easy way to refuse or withdraw it.
5.How to control browser storage
You can inspect, block, or delete cookies and local storage in your browser’s privacy or site-data settings. Blocking strictly necessary storage may prevent admin sign-in, cause preferences to be forgotten, or prevent participation in a campaign whose rules require anti-abuse protection. Clearing storage does not delete campaign records held on the server; use the rights described in the Privacy Policy for that.
You can also use browser controls or Google account settings to limit third-party cookies. Some reCAPTCHA-protected campaigns may not work if the service is blocked.
6.Changes and contact
We update this policy when browser storage or providers change. The effective date above shows the latest revision. Questions can be sent to [email protected]. For information about the personal data linked to these technologies, see our Privacy Policy.