1. What Are Cookies?
Cookies are small text files that are placed on your device by a website when you visit it. They are widely used to make websites work, to improve their efficiency, and to provide information to the website operator.
Similar technologies, such as localStorage and sessionStorage, may also be used in our web panel to store authentication tokens and user preferences, as well as to protect the platform against Cross-Site Request Forgery (CSRF) attacks.
2. Cookies We Use
| Cookie / Key | Type | Purpose | Duration |
|---|---|---|---|
| cb_access_token | Strictly Necessary | HttpOnly, Secure cookie issued by our server when you sign in. It authenticates your session and cannot be read by scripts running on the page. | Up to 1 hour, or until you log out |
| cb_verified | Strictly Necessary | Legacy HttpOnly, Secure cookie from a previous release. The current app does not use it for authorization and clears it when you log out. | Until logout or browser expiration |
| cb_user | Functional | Stored in your browser (local storage), not in a cookie. Keeps your display name, email and email-verification status to draw the interface faster. It contains no password or session token. | Until logout |
| Cloudflare (_cf_*) | Strictly Necessary | Set by Cloudflare for DDoS protection, security, and CDN routing. Cannot be disabled. | Varies |
3. How to Control Cookies
You can control or delete cookies in your browser settings. However, disabling strictly necessary cookies will prevent you from logging in to your account and using the control panel.
For guidance on managing cookies in your browser, visit:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Cookies and Site Permissions
4. Third-Party Cookies
We use Google Fonts to load typography on our website. Google may set cookies or collect data as part of this service, subject to Google's own privacy policy. We do not use third-party advertising or cross-site tracking cookies.
Our payment processor, Whop.com, may set its own cookies during the checkout process to securely process your transaction and prevent payment fraud. These cookies are governed by Whop's own cookie and privacy policies, not by Crafters Apex.
We do not currently use analytics platforms (such as Google Analytics) that set tracking cookies. If this changes in the future, this policy will be updated accordingly.
5. Consent & Strictly Necessary Storage
The items listed in Section 2 as strictly necessary are required to sign you in and to keep the platform secure, so they are used without asking for separate consent. We do not set optional cookies for advertising, analytics or cross-site tracking. If that changes, we will update this page and ask for your consent before using them.
6. Information Stored on Your Device
Your session credential is an HttpOnly cookie (cb_access_token), so scripts on the page, including ours, cannot read it. The only sign-in item kept in your browser’s local storage is cb_user, which holds your display name, email and verification status and no secrets. Both are removed when you log out or when your session expires, and the page logs you out automatically if the session expires while it is open. Avoid shared or public computers and always log out when you finish.
7. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our technology or legal obligations. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
Questions? Contact us via our Contact page.