The cookies and browser storage Shft Money uses, and why.
What cookies are
Cookies are small files a website saves in your browser. Browsers also offer similar storage, called session storage and local storage. This notice lists all of them that Shft Money uses. AINA Technologies LLC operates Shft Money.
Cookies we set
We set two cookies. Both come from shft.money itself, and both are strictly necessary: the app can't provide what you ask for without them.
Name
Why
How long
Set when
creator_session
Keeps you signed in. It holds a random value, and we store only a hash of it. Scripts on the page can't read it, and it is sent only over secure connections.
30 days, or until you log out
You sign up or log in
shft_workspace
Remembers which business you chose, so the app shows that business. It holds only a business ID. We check that you are still a member every time; it doesn't give access on its own.
1 year
You switch business, join a team or accept a team invitation
If you don't sign in, we don't set any cookies. Visitors, buyers and tippers get no cookies from us.
Other storage in your browser
Key
Where
Why
How long
creator-payment:…:attempt
Tip form on a business page
A random key, so that retrying a payment doesn't charge you twice
Until you close the tab
fanrail:product:…:attempt
Product checkout
The same, for product purchases
Until you close the tab
fanrail:overlay:…:cursor
Stream alert overlay, in the streamer's streaming software
Remembers the last alert shown, so alerts don't repeat
Until cleared
None of these hold personal data, and none are used for tracking. They are strictly necessary for the payment form, checkout and stream overlay to work as you expect.
Content from other companies
Whop. Checkout, identity verification, the wallet, withdrawals and cards are provided by Whop. They load from Whop's servers, in secure frames on our pages or on Whop's own checkout. Whop may set its own cookies or use similar technology there, under its own policies, to provide those services and protect them against fraud. We don't control them.
Google Fonts. Our pages load fonts from Google's servers (fonts.googleapis.com). To fetch them, your browser sends Google your IP address and browser details. We don't set any cookies for this.
No advertising or tracking
We don't use advertising cookies, cross-site tracking or third-party analytics. We count page views and similar events per day without cookies or identifiers, and we don't count your page views if your browser sends a Do Not Track signal. The Privacy Policy explains these counts.
Why we don't show a cookie banner
Laws such as the EU ePrivacy rules and the UK's Privacy and Electronic Communications Regulations require consent for cookies and similar storage, except where they are strictly necessary to provide a service you have asked for. Everything we set falls under that exception:
creator_session keeps you signed in after you log in;
shft_workspace is set only when you choose a business or join a team, so that the app shows the business you chose;
the session storage keys stop a payment you retry from being charged twice; and
the local storage key stops stream alerts from repeating.
So we don't ask for cookie consent. If we ever add cookies or storage that are not strictly necessary, such as analytics or advertising cookies, we will ask for your consent first and update this notice.
Your choices
You can see and delete cookies and browser storage in your browser's settings. If you block creator_session, you can't sign in. If you delete shft_workspace, you will return to your default business next time.