Back

Cookies

Last updated: 28 September 2026

ShipStreak uses essential cookies to keep you signed in and protect account actions from cross-site request forgery. We also use DataFast analytics cookies to measure traffic and attribute revenue to marketing channels. We do not set advertising or retargeting cookies.

Essential cookies

  • sessionHTTP-only cookie holding your Firebase session. Set after you sign in, valid for 5 days, then you sign in again. Cannot be read by JavaScript.
  • csrf_tokenHTTP-only cookie used to verify that mutating requests (POST/PUT/PATCH/DELETE) came from this app and not a third party.
  • csrf_token_clientNon-HTTP-only companion of csrf_token. The client reads it and sends the value in a request header so the server can validate the pair. It contains no personal data.
  • firebase_tokenLegacy ID-token cookie name. Logout still clears it if present. New sessions use session only.

Analytics cookies (DataFast)

DataFast is a privacy-friendly analytics provider. Its script runs on shipstreak.space and sets first-party cookies so we can see which channels bring visitors and paid customers. When you start Checkout, we may pass these IDs to Stripe as session metadata for revenue attribution.

  • datafast_visitor_idPseudonymous visitor identifier used to stitch pageviews and (when present) Stripe payments to the same journey.
  • datafast_session_idSession identifier for the current browsing session.

More detail: DataFast privacy.

What we do not set

  • No advertising or retargeting cookies
  • No Google Analytics / Meta Pixel / similar ad trackers
  • No cross-site tracking identifiers for ads

Consent

Essential cookies are required for sign-in and CSRF protection. We do not show a cookie banner for them. DataFast cookies are disclosed here and in our Privacy Policy. A consent banner stays off (config.cookies.nonEssentialEnabled is false) unless we later gate optional scripts behind Accept / Reject.

If you sign out or delete these cookies in your browser, you may need to sign in again, and analytics attribution for that browser will reset.

Contact

Questions about cookies: support@shipstreak.space. See also our Privacy Policy and Terms of Service.