Legal
This Cookie Policy explains which cookies the createlink.link website ("Platform", "Service", "We", "Us", "Our") uses, what each one is for, and how You can control them. It supplements Section 7 of our Privacy Policy and should be read together with that Policy and with our Terms of Service.
In short: We use strictly necessary cookies only. There are no analytics, advertising, or third-party tracking cookies on this site.
1.1. A cookie is a small text file that a website stores in Your browser and receives back on subsequent requests. It lets the site recognise the same browser: without it, every click would look like a visit from a stranger and You could not stay signed in. 1.2. Strictly necessary (technical) cookies are those without which a service You explicitly requested cannot be provided: signing in to Your account, form protection, remembering Your chosen interface language. EU law (ePrivacy Directive, Art. 5(3)) exempts such cookies from the prior-consent requirement but still requires transparent disclosure — which is the purpose of this document and of the notice shown at the bottom of the page. 1.3. Optional cookies are analytics, advertising, social-network and any other behaviour-tracking cookies. Those require Your consent. We do not use any, so there is nothing to ask for.
2.1. session — the session cookie. It holds Your sign-in state, the selected interface language, and the anti-CSRF token that protects our forms against cross-site request forgery. It does not contain Your password. It is set by our own server and carries the HttpOnly (not readable by page scripts), SameSite=Lax and Secure (HTTPS only) attributes. Lifetime: until the browser is closed; for an administrator session, up to 30 days. 2.2. remember_token — the "Remember me" cookie. It is created ONLY if You tick that box on the sign-in page, and it lets You return without entering Your password again. It contains a signed account identifier, not a password. Attributes: HttpOnly, SameSite=Lax, Secure. Lifetime: up to 365 days, or until You sign out, whichever comes first. 2.3. cl_cookie_notice — the cookie notice's own cookie. Its only purpose is to remember that You have already seen the notice at the bottom of the page, so that it is not shown again on every page. It stores the value "1" and no identifier of any kind. Lifetime: 12 months. 2.4. All three are strictly necessary cookies within the meaning of Section 1.2 and are set by the createlink.link domain itself (first-party). No third party has access to them. 2.5. The Platform does not use localStorage or similar client-side storage technologies.
3.1. We do not use analytics cookies and We do not embed any third-party analytics script, visitor counter, advertising pixel, or social-network widget in the Service. 3.2. We do not use cookies for profiling, for building advertising audiences, or for tracking You across other websites. 3.3. We do not sell or share cookie data with third parties. 3.4. The website is served directly from our own server; We do not proxy it through a third-party content delivery network that would set cookies of its own. External presentation libraries (icon fonts, stylesheets) are loaded from public CDNs and set no cookies.
4.1. When a visitor follows a short link created by a Platform User, We do NOT set any cookie in that visitor's browser. The click is recorded server-side as an event (timestamp, IP address, user-agent string, country derived from IP) as described in Section 1 of the Privacy Policy, and no identifier is written to the visitor's browser. 4.2. The destination website a short link points to does not belong to Us and may set its own cookies under its own policy. That is the responsibility of the operator of that website, not of the Platform (Section 12 of the Privacy Policy).
5.1. You may inspect, delete or block cookies at any time in Your browser settings — the relevant section is usually called "Privacy", "Cookies" or "Site data". 5.2. Because all of our cookies are strictly necessary, blocking them has direct consequences: You will be unable to sign in or will lose Your session immediately, form submissions will be rejected by the CSRF check, and the cookie notice will reappear every time You open a page. Browsing the public pages remains possible. 5.3. Signing out deletes both the session cookie and the "Remember me" cookie.
6.1. Should We ever introduce optional cookies (analytics, for example), We will update this document and obtain Your consent BEFORE any such cookie is set. Material changes will be reflected by an updated "Effective Date".
7.1. Questions regarding this Policy may be directed to info@createlink.link.