// LEGAL
COOKIE_POLICY
Last updated: February 25, 2026
✓ This policy complies with the EU ePrivacy Directive 2002/58/EC (as amended by 2009/136/EC)
✓ This policy complies with GDPR Regulation (EU) 2016/679
2. OUR APPROACH — NO TRACKING COOKIES
WE DO NOT USE:
- ✕ Google Analytics or any website analytics cookies
- ✕ Facebook Pixel or any social media tracking cookies
- ✕ Advertising or behavioural profiling cookies
- ✕ A/B testing or conversion tracking cookies
- ✕ Any cookies that track your activity across other websites
WE USE ONLY:
- ✓ Strictly necessary cookies for authentication and security
- ✓ Stripe cookies on checkout pages only (fraud prevention)
Because we use only strictly necessary cookies, we are not required to display a cookie consent banner under the ePrivacy Directive. However, we are providing this policy in full transparency so you understand exactly what is set on your device.
4. LEGAL BASIS FOR COOKIES
Under the ePrivacy Directive and GDPR, cookies that are strictly necessary for a service explicitly requested by the user do not require prior consent. This exemption covers all cookies we set, as they are required solely for:
- Providing the authenticated service you have signed up for (session management)
- Protecting the security of your account and our systems (CSRF protection)
- Processing a payment you have initiated (Stripe fraud prevention)
Legal basis under GDPR: Art. 6(1)(b) — Contract performance and Art. 6(1)(f) — Legitimate interests (security and fraud prevention).
5. THIRD-PARTY COOKIES (STRIPE)
Stripe cookies (__stripe_mid and __stripe_sid) are set only when you navigate to a checkout page to purchase a Pro subscription. They are not set on any other page of AiTrackr.
These cookies are subject to Stripe's own privacy policy: stripe.com/privacy
Stripe is certified under the EU–US Data Privacy Framework. Data processed by these cookies is used exclusively for fraud detection and payment integrity — not for advertising.
7. DO NOT TRACK
Some browsers transmit a "Do Not Track" (DNT) signal. Since we do not engage in cross-site tracking, behavioural advertising, or analytics, there is no meaningful change in our behaviour in response to a DNT signal. We do not track you regardless.
8. CHANGES TO THIS POLICY
We will update this Cookie Policy if we add new cookies or our use of cookies changes materially. Changes will be reflected in the "Last updated" date at the top. We will notify users of material changes via email.
9. CONTACT
For questions about cookies or this policy, contact: privacy@aitrackr.io