Cookie Policy

The handful of cookies CryptoGate actually uses, why each one exists, and the tracking we deliberately refuse to do.

Last updated: June 20, 2026

The short version: we use the minimum needed to log you in, keep your account safe, and remember your settings. No advertising cookies, no cross-site tracking, no pixels, and we never sell your behaviour. Our analytics don't even use a cookie.

What cookies are

A cookie is a small text file a site stores in your browser. The technology is neutral: one cookie can keep you logged in, while another (the kind ad networks use) can follow you across the web. The difference is who sets it and what it's for. Below is every cookie we set, sorted by why it exists.

Strictly necessary (always on)

These make the site work and keep your account secure. The site cannot function without them, so they aren't optional. They are first-party (set by us) or set by Cloudflare, which sits in front of us to absorb attacks.

Cookie	Set by	What it does
`X-Client-Auth`	CryptoGate	Keeps you signed in to your merchant dashboard. Encrypted, HttpOnly, and restricted to our own site only.
`X-Device-Id`	CryptoGate	Identifies your trusted device so a stolen session cookie alone can't be used from somewhere else.
`__cf_bm`, `cf_clearance`, `_cfuvid`	Cloudflare	Bot protection and abuse mitigation at the network edge. `cf_clearance` remembers that you've already passed a security check so you aren't re-challenged.

Preferences

Two small cookies that simply remember how you like the site. They hold a setting, nothing about you.

Cookie	What it remembers
`cg-theme`	Light or dark mode.
`cg-lang`	Your language (English or Polish).

Analytics

We measure basic, aggregate traffic (page views, which pages are useful) using Cloudflare Web Analytics, which is cookieless. It sets no cookie and builds no profile of you. Separately, we store a first-party visitor ID and the link you arrived from in your browser's local storage (not a cookie) so we can tell whether our own content is working. That data stays with us, is never shared, and is never used to follow you elsewhere.

What we deliberately don't use

This is the part most policies bury. We want it stated plainly.

No advertising or marketing cookies. There is not a single ad-network cookie on this site.
No third-party pixels or trackers. No Facebook pixel, no Google Ads tag, no embedded ad scripts.
No cross-site tracking. Nothing here follows you to other websites or builds a profile of your browsing.
No selling or sharing your behaviour. Your activity is not a product we sell.

For a payment platform built on privacy, that's the point: we collect the minimum needed to keep you safe and signed in, and nothing more.

Managing cookies

You can clear or block cookies in your browser settings at any time. Be aware that blocking the strictly-necessary cookies above will stop you from logging in and will weaken the security checks that protect your account, so the dashboard won't work without them. Since we use no advertising or analytics cookies, there's nothing tracking-related to opt out of.

Questions

If anything here is unclear, email [email protected].