The cookies and browser storage Shft Money uses, and why.
What cookies are
Cookies are small files a website saves in your browser. Browsers also offer similar storage, called session storage and local storage. This notice lists all of them that Shft Money uses. AINA Technologies LLC operates Shft Money.
Cookies we set
We set four cookies. All come from shft.money itself, and all are strictly necessary: the app can't provide what you ask for, or keep your account secure, without them.
Name
Why
How long
Set when
creator_session
Keeps you signed in. It holds a random value, and we store only a hash of it. Scripts on the page can't read it, and it is sent only over secure connections.
30 days, or until you log out
You sign up or log in
shft_workspace
Remembers which business you chose, so the app shows that business. It holds only a business ID. We check that you are still a member every time; it doesn't give access on its own.
1 year
You switch business, join a team or accept a team invitation
shft_login_challenge
Links the code step of a sign-in to the password step, when two-step verification is on. It holds a random value, and we store only a hash of it.
10 minutes, or until you finish signing in
You enter your password on an account with two-step verification
shft_device
Recognises a browser you have signed in from before, so we only send a new-sign-in alert for browsers we haven't seen. It holds a random ID, not personal details.
About 13 months
You sign in
If you don't sign in, we don't set any cookies. Visitors, buyers and tippers get no cookies from us.
Other storage in your browser
Key
Where
Why
How long
creator-payment:…:attempt
Tip form on a business page
A random key, so that retrying a payment doesn't charge you twice
Until you close the tab
fanrail:product:…:attempt
Product checkout
The same, for product purchases
Until you close the tab
fanrail:overlay:…:cursor
Stream alert overlay and its widgets, in the streamer's streaming software
Remembers the last alert shown, so alerts don't repeat
Until cleared
shft:viewer
Support form and challenge form on a business page
A random id for this browser. We keep only a scrambled (hashed) copy, different for each business, to group your support on its leaderboard, show you your own rank, and let the business stop messages from a browser that abuses its page. It is not linked to your name, email or card.
Until cleared
shft:challenges:…
Challenge form on a business page
The challenges you sent from this browser and their secret keys, so you can see whether they were accepted and pay for them
Until cleared (the last 10 are kept)
None of these hold personal data, and none are used for tracking. They are strictly necessary for the payment form, checkout and stream overlay to work as you expect.
Content from other companies
Whop. Checkout, identity verification, the wallet, withdrawals and cards are provided by Whop. They load from Whop's servers, in secure frames on our pages or on Whop's own checkout. Whop may set its own cookies or use similar technology there, under its own policies, to provide those services and protect them against fraud. We don't control them.
Google Fonts. Our pages load fonts from Google's servers (fonts.googleapis.com). To fetch them, your browser sends Google your IP address and browser details. We don't set any cookies for this.
No advertising or tracking
We don't use advertising cookies, cross-site tracking or third-party analytics. We count page views and similar events per day without cookies or identifiers, and we don't count your page views if your browser sends a Do Not Track signal. The Privacy Policy explains these counts.
Why we don't show a cookie banner
Laws such as the EU ePrivacy rules and the UK's Privacy and Electronic Communications Regulations require consent for cookies and similar storage, except where they are strictly necessary to provide a service you have asked for. Everything we set falls under that exception:
creator_session keeps you signed in after you log in;
shft_workspace is set only when you choose a business or join a team, so that the app shows the business you chose;
the session storage keys stop a payment you retry from being charged twice;
the overlay's local storage key stops stream alerts from repeating;
shft:viewer is created only when you send support or a challenge, so the business can show your rank and stop messages from a browser that abuses its page; and
shft:challenges:… is created only when you send a challenge, so you can follow it and pay for it once it is accepted.
So we don't ask for cookie consent. If we ever add cookies or storage that are not strictly necessary, such as analytics or advertising cookies, we will ask for your consent first and update this notice.
Your choices
You can see and delete cookies and browser storage in your browser's settings. If you block creator_session, you can't sign in. If you delete shft_workspace, you will return to your default business next time.