Essential cookies
Auth.js uses secure cookies to maintain sign-in sessions and protect authentication flows. These cookies are necessary for account features. Stripe may set cookies or similar storage when checkout or the customer portal is opened.
Affiliate attribution
When a visitor follows an approved partner link, ShopMender stores an HTTP-only referral cookie for up to 30 days. It contains the partner’s non-secret code and is used to credit a later subscription. It does not contain the visitor’s email, IP address or payment details.
Analytics and marketing
Google Analytics is disabled by default and is loaded only when the operator configures a GA4 measurement ID. When enabled, it can use analytics cookies and receive page views and limited product-interaction events. Dynamic report tokens, referral codes and workspace identifiers are removed from paths before events are sent.
Your choices
Browsers and an applicable consent interface can block or remove analytics cookies. Disabling the affiliate cookie prevents referral credit; disabling essential cookies may prevent sign-in, checkout or billing management.