← Back to Codeforless
Cookie Policy
Last updated: May 5, 2026
This page lists every cookie or similar storage we (or our chosen third parties) place on your device, what each one is for, and how long it lasts. It is the long-form companion to the consent banner you saw on your first visit.
How consent works here
We split cookies into two categories:
- Essential cookies are needed to operate the site — to remember your consent choice, hold your checkout session, and (on the dashboard) keep you logged in. These are set without consent because the law (ePrivacy Art. 5(3)) exempts cookies that are strictly necessary to deliver a service you have explicitly requested.
- Marketing cookies are loaded only after you click “Accept all” or grant marketing consent in “Customize” on the banner. If you reject them, the chat widget and the referral attribution cookie do not load at all.
You can change your choice at any time:
The full list
| Name | Category | Provider | Purpose | Duration |
|---|---|---|---|---|
| cf_consent | Essential | Codeforless (first-party) | Records which cookie categories you have agreed to. Without it the consent banner would re-appear on every page load. | 12 months |
| cf_referral | Marketing | Codeforless (first-party) | Remembers a referral code from a `?ref=` URL so an affiliate or referrer is credited if you sign up later. Set only with marketing consent. | 30 days |
| cf_access (only on platform.codeforless.net) | Essential | Codeforless (first-party) | Authentication cookie used by the user dashboard. Only set after you log in. Listed here for completeness — it is not set on this marketing site. | Session |
| __stripe_mid, __stripe_sid, others | Essential | Stripe | Set by Stripe Checkout when you start a payment, used by Stripe for fraud prevention. Only loaded after you click "Buy". | Up to 1 year |
| ph_*_posthog (localStorage + cookie) | Marketing | PostHog (EU) | Set by PostHog to issue an anonymous visitor ID for product analytics and to keep your in-page chat conversation with our support team open across reloads. Data is hosted in the EU. Loaded on every visit; the chat widget is the floating bubble at the bottom-right. | Up to 1 year |
| _ga, _ga_* | Marketing | Google Analytics 4 | Aggregate traffic stats — page views, sessions, referrers. The _ga / _ga_<id> cookies are written only with marketing consent. Without consent, gtag.js still loads on the page but runs in Google Consent Mode v2 with analytics_storage=denied — it sends cookieless pings to Google for modeling but writes nothing to your device. Data is processed by Google in the US under standard contractual clauses. | Up to 2 years |
Browser controls
You can also block or delete cookies in your browser settings. Doing so may stop the consent banner from remembering your choice, in which case it will keep re-appearing.
Changes
If we add or remove a cookie we will update this page and, where the change affects a category that needs consent, ask you again.
Contact
Questions: hello@codeforless.net.