Cookie Policy
Last updated: 2026-05-07.
This page lists every cookie, localStorage entry and sessionStorage entry that btcrecharge uses, what each is for, how long it persists, and which consent category it belongs to. To change your preferences, click in the footer.
Strictly necessary (always on)
Required for the site to function. Without these the checkout won't work and CSRF protection cannot operate. You cannot opt out - but they only carry session state and your consent choice, never tracking data.
| Name | Type | Purpose | Duration |
|---|---|---|---|
btcr_sess | Cookie (HttpOnly, SameSite=Lax) | PHP session ID. Required to keep you signed in if you're an admin and to remember CSRF state across requests. | Session (cleared when you close the browser; max 2 hours) |
cookie_consent_v1 | Cookie (SameSite=Lax) | Stores your consent choice (which categories you accepted) so we don't ask again on every page. | 1 year |
locale | Cookie (SameSite=Lax) | Remembers the language you picked from the language switcher. Falls back to URL-prefix detection (e.g. /ro/) when not set. | 1 year |
Functional (optional)
UX improvements. Off by default; enabled only if you click Accept all or toggle them in Customize. If you reject these, the site still works, you just lose the extras described below.
| Name | Type | Purpose | Duration |
|---|---|---|---|
ref | Cookie (SameSite=Lax) | Affiliate referrer attribution. Set when you arrive via ?ref=CODE so the affiliate can be credited even if you wait days before placing an order. Without functional consent, the same value lives in sessionStorage (cleared on tab close). | 1 year |
btcr_recent_v1 | localStorage (your device only) | Stores up to 5 recent order IDs so you see a quick re-order list on the homepage. Never sent to our server; lives only in your browser. | Until you clear browser data or revoke consent |
btcr_ref | sessionStorage (only used as fallback) | Single-session affiliate code holder when you rejected functional cookies but arrived via ?ref=CODE. Cleared when the browser tab closes. | Tab session only |
What we DO NOT use
- No Google Analytics, Plausible, Matomo or any other analytics tool.
- No tracking pixels (Facebook, TikTok, LinkedIn, Twitter, etc.).
- No advertising or remarketing cookies.
- No third-party fonts that profile users - we serve Google Fonts via the CSS variant that doesn't track per-user.
- No fingerprinting.
Third-party services that may set their own cookies
- BTCPay Server - when you click Continue, you're redirected to BTCPay to pay. BTCPay sets its own session cookie on its own domain; we have no access to it. BTCPay privacy policy.
- Cloudflare Turnstile (when enabled) - sets a short-lived cookie scoped to
challenges.cloudflare.comfor bot detection. Privacy-friendly by design (no behavioral tracking). Cloudflare privacy policy. - Mailgun / SMTP - does not set browser cookies. Used only for sending you order confirmation emails.
Your rights
- You can withdraw consent at any time by clicking in the footer.
- You can clear all cookies for this site through your browser's settings (Chrome: Settings -> Privacy -> Cookies; Firefox: Preferences -> Privacy & Security -> Cookies and Site Data; Safari: Preferences -> Privacy -> Manage Website Data).
- Email support@btcrecharge.com for any privacy-related question.
For the broader privacy framework - what we collect at order time, retention periods, processors - see the Privacy Policy.