Cookie policy
Last updated October 24, 2026
We only use the cookies this site needs to work. No analytics, no advertising and no tracking, so there's nothing to accept.
The cookies we use
All of them are first-party and strictly necessary. On the live site some names carry a security prefix (__Secure- or __Host-).
| Cookie | What it does | Lasts |
|---|---|---|
| authjs.session-token | Keeps you logged in. | 30 days |
| authjs.csrf-token | Protects the login forms from forged requests. | Session |
| authjs.callback-url | Remembers where to bring you back after logging in with Google. | Session |
| ugfy_pending | Remembers the sign-up you started, so this browser can confirm it in one tap. | 24 hours |
| ugfy_role | Remembers creator or brand while you sign in with Google. | 15 minutes |
The bot check
The sign-up form uses Cloudflare Turnstile to tell people from bots. It runs from challenges.cloudflare.com and uses only the technical data it needs for that check; it's not used for advertising or tracking.
Why we don't ask for consent
Cookies that are strictly necessary for a service you asked for don't need consent under EU and Spanish law (LSSI art. 22.2). You can block or delete them in your browser settings, but then logging in and signing up won't work.
Questions
Write to ugfysupport@gmail.com. If we ever add other cookies, we'll update this page and ask for your consent first.