Cookie Policy
Last updated:
Strictly necessary cookies cannot be disabled; they are required for the Platform to function. Analytics cookies are set only with your consent, which you can withdraw at any time via the cookie settings banner or your browser settings.
1. What Are Cookies
Cookies are small text files placed on your device by a website so it can remember your visit, such as your login session or preferences. We also use similar technologies including localStorage (collectively "cookies" in this policy).
2. Cookies We Use
2.1 Strictly Necessary
Essential for the Platform to function. Without them you cannot log in or use core features. They do not require consent.
| Name | Purpose | Expiry |
|---|---|---|
creator_token |
Keeps you signed in to your creator session (HttpOnly cookie). | 7 days |
attribyte_web_refresh |
Refresh token that renews your web session (HttpOnly cookie). | Web session |
attribyte_access_token |
Access token for your brand portal session (localStorage). | Until cleared |
attribyte_user |
Your signed-in brand portal user (localStorage). | Until cleared |
attribyte_workspace |
Remembers which workspace you selected on the landing page (localStorage). | Until cleared |
2.2 Functional
| Name | Purpose | Expiry |
|---|---|---|
attribyte_cookie_consent |
Records your consent choices and the banner version you answered. Set whether you accept or decline, so we can remember a refusal (localStorage). | 12 months |
lang |
Your preferred interface language (cookie). | 12 months |
attribyte_creator_lang_override |
Interface language override in the creator app (localStorage). | Until cleared |
We also use other localStorage and sessionStorage entries that only keep interface state, for example filters, drafts and selections. They are not used for tracking.
2.3 Analytics: Google Analytics
We use Google Analytics 4 to understand how the Platform is used. The tag is only loaded after you accept analytics cookies in the banner. If you decline, or never answer, no analytics cookie is set.
| Name | Purpose | Expiry |
|---|---|---|
_ga |
Distinguishes visitors so sessions can be counted. | 2 years |
_ga_SWRQ5MNT68 |
Persists session state for our Google Analytics property. | 2 years |
2.4 Advertising Measurement: Snapchat Pixel
Our public marketing pages load the Snapchat Pixel, which we use only to measure our own Snapchat advertising: whether people who saw one of our ads visited our site or signed up. It never runs inside the creator or brand portals and is not used to target advertising at you on behalf of any brand. The data it collects is also processed by Snap under its own privacy policy. You can opt out in your Snapchat ad preferences or by blocking third-party cookies in your browser.
| Name | Purpose | Expiry |
|---|---|---|
_scid |
Identifies a visitor to Snap for ad measurement. | 13 months |
_scid_r |
Companion identifier used by Snap for the same purpose. | 13 months |
2.5 Attribution Identifiers on Brand Sites
On brand sites that use our tracking, we store an attribution identifier and a visitor identifier, first-party on the brand's site, so a purchase or lead can be credited to the creator whose link led to it.
Shopify stores (theme embed).
| Name | Purpose | Expiry |
|---|---|---|
_attribyte_att_id |
Attribution identifier from the tracking link a shopper arrived through, with source and ad identifiers (cookie). | 7 days |
_attribyte_vid |
Visitor identifier (cookie). | 7 days |
The attribution data is also added to the cart as the cart attributes _att_id, _att_source and _att_adid, so an order within the attribution window can be attributed.
Other sites (Universal Pixel).
| Name | Purpose | Expiry |
|---|---|---|
att_vid_<storeId> |
Visitor identifier (cookie and localStorage). | 7 days |
The Universal Pixel also uses sessionStorage entries to avoid recording the same checkout or lead event twice.
The brand, as operator of the site, is responsible for collecting consent where the law requires it and for its own cookie notice. Our Shopify integration can respect the store's customer privacy settings when the brand enables consent gating in the app. The Universal Pixel does not collect consent itself; the brand must load it only after consent where required. We and the brand are joint controllers for the resulting attribution data, as described in Section 3 of our Privacy Policy. We do not store shopper names, postal addresses, phone numbers or payment details, and an email address from an order is kept only as a keyed one-way hash, never in plain text.
3. Managing Your Preferences
Use the "Manage cookie preferences" button at the top of this page to change your choices at any time. You can also delete or block cookies in your browser settings; blocking strictly necessary cookies will prevent the Platform from working correctly.
4. Legal Basis
- Strictly necessary and functional cookies: contractual necessity and legitimate interests; no consent required.
- Analytics cookies: consent. You can withdraw it at any time without affecting the lawfulness of prior processing.
- Advertising measurement: legitimate interests in measuring our own advertising.
- Attribution identifiers on brand sites: the brand operating the site is responsible for collecting consent where the law requires it. The resulting attribution data is processed on the basis of legitimate interests and performance of a contract, as joint controllers with the brand.
5. Changes to This Policy
We may update this Cookie Policy when we change the cookies we use. Material changes will be notified in accordance with our Privacy Policy, and the consent banner will re-appear to capture fresh consent where required.
6. Contact
Email: legal@attribyte.app
Attribyte App Inc., 28 Geary St STE 650, #599, San Francisco, CA 94108, United States
+116.4%