What cookies are
Cookies are small files a website stores in your browser. Similar technologies (such as local storage) are covered here too.
Your choice
The first time you visit, a small banner asks you to choose:
- Necessary only (the default): we use only the cookies below that are needed to run the site.
- Allow ad measurement: if you arrived from an ad, we also keep the ad's click ID so we can see which ads lead to sign-ups. Nothing else changes.
You can change your mind at any time with the Cookie choices link in the footer of every page. If you withdraw consent, we delete any click IDs we stored for you.
Strictly necessary cookies
These keep you signed in, keep the site secure and remember your cookie choice. They don't need your consent. You can block them in your browser, but sign-in will then not work.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
__Host-sb_session |
spawnboost.com | Keeps you signed in after Steam sign-in (random session ID; HttpOnly, Secure, SameSite=Lax) | 30 days, or until you sign out |
sb_login_state |
spawnboost.com | One-time value that ties the Steam sign-in redirect back to your browser (prevents login forgery) | 10 minutes |
sb_login_next |
spawnboost.com | Remembers which page to take you back to after Steam sign-in | 10 minutes |
sb_consent |
spawnboost.com | Remembers your cookie choice ("necessary" or "ads") so we don't ask again | 180 days |
__cf_bm |
Cloudflare (on spawnboost.com) | Distinguishes people from bots | 30 minutes |
cf_clearance |
Cloudflare | Proves you passed a security check (only if one is shown) | up to the challenge passage setting, e.g. 30 min |
__cfruid, _cfuvid |
Cloudflare | Rate limiting (only if enabled) | Session |
Payments: server owners pay on Stripe's own checkout page (checkout.stripe.com), where Stripe's cookies and privacy policy apply. We don't place Stripe cookies on spawnboost.com.
Steam: when you click "Sign in with Steam", you go to steamcommunity.com, where Valve's own cookies and privacy policy apply. We don't place Steam cookies.
Campaign attribution (first-party)
| Name | Set by | Purpose | Duration |
|---|---|---|---|
sb_attr |
spawnboost.com | Only when you arrive through a tagged link (UTM parameters) or from an AI assistant: a random ID for a record of which link brought you here (campaign tags, landing page, referring site's domain). It holds no ad click IDs unless you allow ad measurement. | 30 days |
Optional: ad measurement (only with your consent)
If you choose Allow ad measurement and you arrived from an ad, we store the ad's click ID from the link (for example gclid from Google or fbclid from Meta) with the attribution record above. We use it only to measure which ads lead to sign-ups and paid campaigns. There are no advertising pixels or third-party ad cookies on spawnboost.com; any reporting to an ad platform would happen server-side, only for visitors who opted in, and only after this policy and the privacy policy say so.
If you choose Necessary only, click IDs stay in your browser's memory for that page view and are never sent to us.
Analytics
We don't use an analytics tool at the moment: no Google Analytics, no cross-site tracking. If we add one, it will be a privacy-friendly, cookieless tool, and this policy will name it first.
Local storage
We don't use local storage for tracking.
Sources
Contact: [email protected]