Legal
Cookie Policy
Effective 18 August 2026 · Last updated 18 August 2026
This Cookie Policy explains how AffiStack uses cookies and similar technologies (local storage and session storage) on https://affistack.store. It should be read with our Privacy Policy.
In the UK and EEA, non-essential cookies require your consent (ePrivacy / PECR and GDPR). Essential cookies do not. This notice is for transparency. It is not legal advice.
1. What cookies are
A cookie is a small file stored on your device. We also use local storage and session storage, which work similarly and are covered here.
Cookies may be:
- First-party — set by AffiStack
- Third-party — set by another domain (for example Google, or Amazon after you click an affiliate link)
2. How we ask for consent
On first visit in an EU/UK locale you see a banner with Reject all and Accept analytics. Analytics and advertising storage stay off until you accept.
Google Consent Mode v2 defaults ad_storage, ad_user_data, ad_personalization, and analytics_storage to denied before any Google tag runs. We update those flags only after your choice.
There is no separate cookie settings panel yet. To change your mind, clear this site’s data in your browser (that removes affistack_consent) and reload — the banner will appear again. You can also block cookies in the browser; the site will still work, but you may need to sign in each visit.
3. Cookies and storage we use
Essential (always on)
affistack_session— HTTP-only cookie. Keeps you signed in. About 30 days. First-party. Set only after you log in.Securein production,SameSite=Lax.affistack_consent— local storage (not an HTTP cookie). Remembers whether you accepted or rejected analytics so we do not show the banner on every page. Until you clear site data.affistack_recently_viewed— local storage. Product IDs you recently opened, so we can show them on the device. Until you clear site data.
Analytics (only with consent)
- First-party events we send to our own servers (page view, product view, search, affiliate click, and similar). Used with a random session id in session storage named
affistack_sid(cleared when the browser tab session ends). - Google Analytics (measurement ID configured on the site) and, if configured, Google Ads tags. These may set cookies such as
_ga,_ga_*,_gid, and Google ads cookies (_gcl_*). Duration is set by Google (often up to 24 months for_ga). Provider: Google Ireland / Google LLC. See Google’s privacy policy and how Google uses cookies.
We do not run separate marketing pixels (Meta, TikTok, etc.) as a condition of using AffiStack.
Not currently set by us as a first-party cookie
Middleware may read affistack_locale if present. Locale is normally taken from the URL (/en-gb, /de-de, …).
4. Legal bases (GDPR)
- Essential cookies — legitimate interests in operating a secure site and performing a contract if you have an account (GDPR Art. 6(1)(f) and (b); PECR exception for strictly necessary cookies).
- Analytics / Google tags — consent (Art. 6(1)(a)). You may withdraw by rejecting analytics (clear site data and choose Reject all) without affecting the site’s core functions.
5. Third-party cookies after you leave AffiStack
Affiliate links (including Amazon) take you to another website. That retailer may set cookies for referral tracking, login, and checkout under their policy. We do not control those cookies. See our Affiliate disclosure and Amazon’s own cookie/privacy notices.
6. Browser controls
Most browsers let you block or delete cookies. Do Not Track is not a consistent standard; we do not treat a DNT signal as consent or withdrawal. Use the banner (or clear site data) for analytics on AffiStack.
7. Changes
We may update this Cookie Policy. The “Last updated” date will change.