Cookie Policy

1. The one cookie we set

When you sign in, RefreshCoin sets an authentication session cookie. It contains an opaque signed token, not your email or password. The cookie is httpOnly, which means scripts on the page cannot read it, and SameSite=Lax, which means it is not attached to cross-site requests. Its lifetime is 30 days, and signing out clears it.

• Name: auth session cookie (a technical name set by the app).
• Purpose: keep you signed in so you do not have to re-enter your password on every visit.
• Scope: this site only.
• Expiry: 30 days, or immediately when you sign out.

2. Local storage

Your coin watchlist and a few interface preferences are stored in the local storage of your browser. This is not a cookie: it never leaves your device and our server has no access to it. Clearing your browser storage removes it, and your watchlist will then start empty on that device.

3. Third parties

We load coin logo images from public CDNs, and those image requests are a normal part of browsing: we do not knowingly work with CDNs that set advertising cookies. We do not embed analytics scripts, ad networks or social widgets, so no third party receives a cookie from RefreshCoin through us.

4. Controlling cookies

You can refuse or delete cookies in your browser settings at any time. If you block our session cookie, the site will still work for browsing: prices, charts, the blog and everything else are readable without an account. You just will not be able to stay signed in, and therefore will not be able to post in the community chat.

5. Changes to this policy

If a future feature genuinely needs another cookie, we will add it to this page and update the date at the top before it goes live. Our working rule stays the same: the fewer cookies, the better.