Cookie Policy - CartGain

1. What are cookies?

Cookies are small text files stored in your browser by a website. We use cookies strictly for functionality — to keep you signed in and to protect your account.

2. Cookies we use

CartGain's dashboard uses authentication cookies provided by the Auth.js (NextAuth) framework. All of them are essential and are set with Secure, HttpOnly, and SameSite attributes. They are set so the app keeps working when embedded as a Shopify admin inside an iframe.

Cookie	Purpose	Type
next-auth.session-token	Keeps you signed in to the CartGain dashboard	Essential (session)
next-auth.csrf-token	Protects forms from cross-site request forgery	Essential (security)
next-auth.callback-url	Redirects you back to the page you came from after signing in	Essential (session)
next-auth.pkce.code_verifier	Secures the OAuth sign-in flow (PKCE)	Essential (security)

3. What we do NOT use

No advertising cookies. We do not run any ad networks or retargeting.
No third-party analytics trackers. We do not use Google Analytics, Meta Pixel, or similar tools that profile visitors across sites.
No persistent tracking of site visitors. The customer-facing bargain page does not store cookies on shoppers' devices.

4. Managing cookies

Because our cookies are essential to signing in and securing your account, disabling them will prevent you from using the CartGain dashboard. You can still control and delete cookies through your browser settings at any time. Because we use no non-essential cookies, no consent banner is required — deleting these cookies simply signs you out.

5. Contact

Questions about this Cookie Policy? Email us at support@cart-gain.com.