Cookie Policy

We use technical cookies, needed to run the site. Only with your consent we also use our own campaign-measurement cookie and the Meta Pixel; no other profiling, advertising or analytics cookies.

Technical cookies in use

• Authentication session (Auth.js): keeps you logged in. HttpOnly, Secure, SameSite cookie.
• Language: remembers the site language you chose.
• Post-signup destination: remembers the page to open after you verify your email (up to 7 days, deleted after use).
• Invite code (packify_invite): if you sign up from a friend's link and choose "Continue with Google", it keeps the invite code while you are on Google (up to 1 hour, deleted after use).
• Cookie choice: stores your choice on the banner (in the browser's localStorage).
• Sound (pk-sound-off): remembers that you turned the pack-opening sounds off (in the browser's localStorage). It is saved only when you switch the sound off and deleted when you switch it back on.
• Account security (pk_cid): a random code, set when you sign up or log in, that lets us recognise the same browser across accounts, to enforce one account per person and stop abuse of the welcome bonus (see the Terms, Section 15). It contains nothing about you or your device; we only store a coded fingerprint of it. HttpOnly, SameSite, first-party, 2 years.

Technical cookies do not require prior consent.

Visit statistics without cookies

We count page views with Vercel Web Analytics, which sets no cookies and stores nothing on your device (no localStorage either). The statistics are aggregated and anonymous: see the Privacy Policy.

Optional: campaign measurement (only with your consent)

• Name: packify_utm, first-party (set by packify.cards only).
• What it stores: only the campaign labels of the link you arrived from (the utm_source, utm_medium, utm_campaign and utm_content parameters, e.g. "meta / paid_social / campaign name"). No browsing history; values that look like email addresses are discarded.
• Why: to measure which of our ad campaigns bring sign-ups and purchases. If you create an account, the campaign is saved on your account (and counted together with your Coins purchases in our internal per-campaign statistics) and the cookie is deleted. It is kept on your account for at most 24 months.
• Duration: the cookie lasts up to 30 days.
• Legal basis: your consent ("Accept" on the banner). "Necessary only" sets nothing.

Optional: Meta Pixel (only with your consent)

Meta Platforms Ireland (Facebook, Instagram) measures and improves our ads. Cookies on packify.cards: _fbp and _fbc (browser and ad-click identifiers, 90 days) and our packify_ads (records your consent, 180 days); Meta may also use its own cookies if you are logged in to Facebook or Instagram. Sent to Meta: pages visited and, from our server, sign-up, checkout started and Coins purchases (with amount), with your email and account ID hashed (SHA-256), the identifiers above, your user agent and, at checkout, your IP. We and Meta are joint controllers for this collection; Meta then processes the data under its own privacy policy, possibly in the US (EU-US Data Privacy Framework). Legal basis: consent. We keep the identifiers only until the event is sent, 7 days at most.

Your choice

Choose item by item below, or any time via "Cookies" at the bottom of every page. Unticking an item withdraws that consent and deletes its cookies and what is saved on your account. "Necessary only" on the banner does both.