Cookie Policy
Last Updated: October 28, 2026
1. What Are Cookies
Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website operators. We also use similar technologies such as localStorage for storing user preferences.
2. Essential Cookies
These cookies are strictly necessary for the Service to function. They cannot be disabled.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase | Authentication session (httpOnly, Secure). Keeps you logged in securely. | Session |
| cf_clearance | Cloudflare | Turnstile CAPTCHA verification. Proves you are not a bot. | 30 min |
| __cf_bm | Cloudflare | Bot management. Helps distinguish humans from automated traffic. | 30 min |
| buxy-consent | Buxy | Stores your cookie consent preferences. | 12 months |
| buxy_discord_state | Buxy | Discord join security check (httpOnly, Secure, first-party). Confirms the Discord authorization you return from was started by you. | 30 min |
| buxy_discord_next | Buxy | Discord join return page (httpOnly, Secure, first-party). Remembers which page to send you back to after Discord. | 30 min |
3. Analytics Cookies
These cookies help us understand how visitors interact with the Service. They are only set with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _gid | Google Analytics | Tracks page views, session duration, and user behavior for analytics. | Up to 26 months |
| ph_* | PostHog | Product analytics: feature usage, user flows, and experience optimization. Includes anonymized session replays (all text inputs are masked). | 12 months |
4. Fraud Prevention
These technologies help us prevent fraudulent activity and protect the integrity of the reward system. They are always active under legitimate interest, as fraud prevention is essential to the operation of the Service.
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
| FingerprintJS | FingerprintJS | Generates a device fingerprint to detect multi-accounting, bot usage, and other fraudulent behavior. | Variable |
5. Functional Storage
We use browser localStorage (not cookies) to store UI preferences. This data never leaves your device.
| Key | Purpose | Duration |
|---|---|---|
| buxy-app-store | Stores UI preferences (sidebar state, sound settings). | Persistent |
6. Push Notifications
We use Webpushr to deliver optional web push notifications (daily bonus reminders, reward updates). Push notifications require your explicit permission via your browser's native prompt. No cookies are set — Webpushr uses a browser-generated push subscription token. You can unsubscribe at any time through your browser notification settings. No personal data beyond the subscription token is shared with Webpushr.
7. Managing Your Preferences
You can change your cookie preferences at any time using the button below. You can also clear cookies through your browser settings.
Please note that disabling essential cookies will prevent the Service from functioning properly. Disabling fraud prevention may limit your ability to earn rewards, as we may not be able to verify your activity.
9. Contact Us
If you have questions about our use of cookies, please contact us at support@buxyapp.com.