Cookie Policy

## 1. Overview glowDOLLARS uses cookies and similar technologies (collectively, "cookies") to operate the Site, keep you signed in, attribute affiliate referrals, and measure aggregate traffic. This policy describes the cookies we set, how consent works, and how you can control them. It should be read alongside our Privacy Policy at /legal/privacy/. ## 2. Cookies We Set We set the following cookies directly. All are marked HttpOnly, Secure, and SameSite=Lax where applicable, which means they cannot be read by JavaScript and are sent only over HTTPS to the same site. - **better-auth.session_token** (on HTTPS the cookie name is prefixed **__Secure-better-auth.session_token**). Authentication session cookie set by our authentication provider (Better Auth). It keeps you signed in. It is refreshed after approximately one day of activity and expires after approximately seven days. - **gd_ref**. Affiliate referral attribution cookie. When you arrive at the Site from an affiliate referral link, the ?ref= parameter is captured and stored in this cookie so the referring affiliate can be credited if you sign up. It is set on a 30-day lifetime, on a last-touch basis (the most recent valid ?ref= is the one recorded), and applies to the whole Site. - **_ga** and **_ga_<measurement_id>**. Google Analytics 4 analytics cookies (property G-S2M7V66GBX), used to produce aggregate, pseudonymous usage statistics. These follow Google's default durations (approximately two years) and are set only after you have granted analytics consent (see section 3). ## 3. Consent When you first visit the Site you see a cookie banner offering Accept and Decline choices. Your choice is implemented through Google Consent Mode v2: by default, the analytics, advertising, and personalization consent signals are set to denied, and no analytics cookies are set. If you accept, the relevant consent signals switch to granted and Google Analytics 4 begins setting its cookies and collecting aggregate measurements. If you decline, analytics remains disabled and no analytics cookies are set. Your banner choice is remembered in your browser's local storage (key: gd-cookie-consent), not in a cookie. We do not set any preference or theme cookie; the Site is dark-only and remembers no theme choice. ## 4. Managing Cookies You can control or delete cookies through your browser settings. Disabling or deleting the authentication session cookie will sign you out and prevent you from signing back in until it is restored. Disabling or declining the analytics cookies will not affect Site functionality beyond disabling aggregate analytics measurement. Because the authentication and referral cookies are HttpOnly, they can only be removed through your browser's cookie controls. ## 5. Changes We may update this policy when our use of cookies changes. Material changes will be reflected in the cookie banner and on this page.