Essential cookies
Auth.js uses secure cookies to maintain sign-in sessions and protect authentication flows. These cookies are necessary for account features. Stripe may set cookies or similar storage when checkout or the customer portal is opened.
Scan continuity
An HTTP-only, same-site cookie preserves the most recent free report for up to seven days, so pricing and checkout can reuse the scan without requesting the URL again. It contains the random report token and must be treated as a private access link. First-party funnel records use scan and account IDs; they do not create a visitor fingerprint.
Affiliate attribution
When a visitor follows an approved partner link, ShopMender stores an HTTP-only referral cookie for up to 30 days. It contains the partner’s non-secret code and is used to credit a later subscription. It does not contain the visitor’s email, IP address or payment details.
Analytics and marketing
Google Analytics is disabled by default. When a GA4 measurement ID is configured, its script loads only after you allow optional analytics. Report views and offer interactions also require this choice. Campaign labels, a public landing-page category and the referrer hostname may be kept in session storage until that tab session ends and copied to an accepted scan for attribution. Raw query strings and private report content are not collected. Dynamic report tokens, referral codes and workspace identifiers are removed from paths before events are sent.
Your choices
Use Privacy choices to allow or decline optional analytics at any time. Your preference is kept in local storage. Global Privacy Control is respected. Declining disables further optional measurement; scans, authentication and billing records remain necessary to provide the service. Product interaction events and scan campaign attribution are retained for up to 400 days, subject to the scheduled retention job. Disabling the affiliate cookie prevents referral credit; disabling essential cookies may prevent sign-in, checkout or billing management.