Cookie Policy
1. Overview
glowDOLLARS uses cookies and similar technologies (collectively, "cookies") to operate the Site, keep you signed in, attribute affiliate referrals, and measure aggregate traffic. Product analytics runs on every visit. Google advertising storage, advertising user data, and advertising personalization signals are disabled because the Site does not use Google advertising features. This policy describes the technologies we use and how you can control them. It should be read alongside our Privacy Policy at /legal/privacy.
2. Cookies We Set
We use the following first-party cookies. Authentication and referral cookies are marked HttpOnly, Secure, and SameSite=Lax where applicable. Google Analytics cookies must be readable by its browser script and therefore are not HttpOnly.
- better-auth.session_token (on HTTPS the cookie name is prefixed __Secure-better-auth.session_token). Authentication session cookie set by our authentication provider (Better Auth). It keeps you signed in. It is refreshed after approximately one day of activity and expires after approximately seven days.
- gd_ref. Affiliate referral attribution cookie. When you arrive at the Site from an affiliate referral link, the ?ref= parameter is captured and stored in this cookie so the referring affiliate can be credited if you sign up. It is set on a 30-day lifetime, on a last-touch basis (the most recent valid ?ref= is the one recorded), and applies to the whole Site.
- _ga and _ga_<measurement_id>. Google Analytics 4 analytics cookies (property G-S2M7V66GBX), used for pseudonymous product and traffic measurement, referral attribution, funnel and conversion events, and Core Web Vitals. These use Google's configured retention and cookie durations. Analytics storage is enabled on every visit.
3. Analytics and Advertising Preferences
Google Analytics 4 loads on every visit and the Google Consent Mode `analytics_storage` signal is initialized as granted. We use this measurement under the legitimate interests described in our Privacy Policy.
The Google Consent Mode signals `ad_storage`, `ad_user_data`, and `ad_personalization` are initialized as denied and are not changed by the Site. If we introduce a Google advertising feature later, we will update this policy and provide any required controls before enabling those signals. We do not set an advertising-preference or theme cookie; the Site is dark-only.
4. Managing Cookies
You can block or delete cookies through your browser settings or use content-blocking controls. Disabling or deleting the authentication session cookie will sign you out and prevent you from signing back in until it is restored. Blocking Google Analytics will not affect core Site functionality, but it will prevent measurement in that browser. Because the authentication and referral cookies are HttpOnly, they can only be removed through your browser's cookie controls.
5. Changes
We may update this policy when our use of cookies changes. Material changes will be posted on this page with an updated effective date.