Effective date: 11 July 2026 Last updated: 13 July 2026 Version: 1.1
This policy explains which cookies the a11yfy platform ("a11yfy", "we") uses and why. The short version: we use only strictly necessary cookies, our analytics are cookieless, and the only third-party cookies you may encounter are set by our payment provider during checkout.
1. What are cookies?
Cookies are small text files stored by your browser on your device. They allow a website to remember your session and preferences between page loads.
2. Cookies set by a11yfy
a11yfy sets only the strictly necessary (essential) cookies listed below. Core platform functionality — signing in, staying signed in, keeping your language — does not work without them.
| Cookie | Type | Purpose | Retention |
|---|---|---|---|
better-auth.session_token |
Essential | Identifies your login session | Until session expiry or sign-out |
PARAGLIDE_LOCALE |
Essential | Stores your selected language | Until browser session ends |
No tracking cookies
a11yfy does not use any advertising, marketing, social-media, or cross-site tracking cookies.
Locally stored data (not cookies)
If you arrive at a11yfy from a campaign link or another website, we store the campaign parameters (utm_*), the referring URL, and your landing page in your browser's localStorage under the key a11yfy_attr for up to 24 hours. Its sole purpose is that, if you create an account, we can record which channel brought you (see "Signup attribution" in the Privacy Policy). This entry is first-party only, is never shared with third parties, involves no cross-site tracking, and is deleted after signup or automatically after 24 hours.
Because we only set cookies that are strictly necessary for providing the service you request, no cookie consent banner is required for them (ePrivacy Directive Art. 5(3); processing is based on GDPR Art. 6(1)(b) — performance of contract).
3. Analytics — cookieless
We measure website traffic with Cloudflare Web Analytics, which:
- does not set or read any cookies;
- does not collect personally identifiable information or track users across sites;
- uses the browser Performance API for aggregate, privacy-preserving measurements.
See the Cloudflare Web Analytics documentation for details.
4. Bot protection — Cloudflare Turnstile
The free document scanner on our website is protected against automated abuse by Cloudflare Turnstile, a privacy-preserving bot-detection service. When you use the scanner, a script loads from challenges.cloudflare.com and may store a short-lived, strictly functional token in your browser to remember that you passed the check.
Turnstile is functional, not tracking: it does not track you across websites, does not build advertising or behavioural profiles, and is not used for analytics. Cloudflare's processing is described in the Cloudflare Privacy Policy.
5. Third-party cookies at checkout — Paddle
Payments are handled by our Merchant of Record, Paddle. When you open the checkout, Paddle's checkout component loads and may set cookies that are necessary to operate the checkout securely — for session handling and fraud prevention. These cookies are governed by Paddle's Privacy Policy.
Outside of the checkout flow, no other third party sets cookies on a11yfy. If this ever changes, we will update this policy and, where required, ask for your consent first.
6. Managing cookies
You can delete or block cookies in your browser settings. Note that blocking the essential cookies listed in Section 2 will prevent you from signing in or using the platform:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Safari → Privacy
7. Contact
Questions about this policy: support@a11yfy.com. See also our Privacy Policy.