<!-- Markdown twin of app/views/pages/cookies.html.erb. Hand-maintained:
     update this file whenever that page changes. -->

# Cookie Policy

Last updated: July 27, 2026

## 1. The short version

CrowdPleaser uses one cookie to make the site work. We run no analytics, no
advertising trackers, and no third-party marketing pixels. Nothing on this site
follows you to other websites.

Because the only cookies we set are necessary for the site to function, there
is no consent banner to click through.

## 2. What a cookie is

A cookie is a small file a website stores in your browser. Cookies set by the
site you are visiting are called first-party cookies. Cookies set by another
company whose code runs on the page are called third-party cookies.

## 3. The cookies we use

| Cookie | Who sets it | What it does | How long |
| --- | --- | --- | --- |
| `_lightning_rails_session` | Us | Keeps you signed in, protects forms against cross-site request forgery, and remembers which programs you already voted for so the page can show you. Encrypted, and not readable by scripts. | Until you close your browser |
| `remember_user_token` | Us | Would keep a Facility owner signed in between visits. Not currently used, since signing in works by emailed link. | 2 weeks, if enabled |
| `__stripe_mid`, `__stripe_sid` | Stripe | Fraud prevention on the payment page. Set only on the checkout page, not while you browse the rest of the site. | About 1 year, and 30 minutes |

## 4. What we do not use

No Google Analytics or other analytics platform. No advertising or retargeting
pixels. No social media trackers. No session recording or heatmaps. No
cross-site profiling of any kind.

## 5. Your choices

You can block or delete cookies in your browser settings. Because our session
cookie is required for sign-in, voting, and form security, blocking it will
stop those parts of the site from working. Browsing a public voting page
without voting works fine either way.

## 6. Questions

Email support@crowdpleaser.app. See also our
[Privacy Policy](https://crowdpleaser.app/privacy-policy.md).
