Cookie Policy.
Every cookie this site can set, what it does, and how long it stays.
The Short Version
The site sets necessary cookies for sessions and security. It also uses Google Analytics automatically to understand the quality and effectiveness of these pages. Google Signals, ads personalization, and all advertising storage are disabled. The random analytics identifier expires after 90 days and is not renewed, so this low-impact setup runs without a consent banner.
Necessary Cookies
These keep the site working. Dutch law exempts them from consent (Telecommunicatiewet article 11.7a) because the pages you request need them. Set by rewardloyalty.co, readable by nobody else.
| Cookie | Purpose | Expires |
|---|---|---|
| reward-loyalty-session | Holds your session: form state, download center sign-in, security checks. | 2 hours |
| XSRF-TOKEN | Proves a form submission came from this site, not from an attacker. | 2 hours |
Analytics Cookies
The site loads gtag.js from googletagmanager.com to count visits, sessions, traffic sources, page use, and engagement. Google Signals, ads personalization, and advertising consent signals are disabled. GA4 uses IP addresses only to derive coarse location data and does not log or store them.
| Cookie | Purpose | Expires |
|---|---|---|
| _ga | Tells returning visitors apart with a random id. | 90 days |
| _ga_BX8P53N9QB | Keeps session state for the measurement. | 90 days |
Provider: Google Ireland Ltd. Data can reach Google LLC servers in the United States under the EU-US Data Privacy Framework.
Marketing Cookies
Not in use right now. The always-on analytics path cannot load Google Ads or set marketing cookies.
Browser Storage
Small entries in your browser's local storage. They stay on your device and travel to no server.
| Key | Purpose | Kept |
|---|---|---|
| rl-affiliate-banner-dismissed-until | Keeps a dismissed affiliate banner closed in local storage. | 90 days |
| rl-social-loyalty-banner-dismissed-until | Keeps the dismissed social loyalty partnership banner closed in local storage. | 90 days |
What Does Not Run Here
No Facebook pixel, no chat widget, no session recording, no tag manager container, no advertising tag, no Google Signals, and no font CDN. Google Analytics is the only third-party script loaded while reading these pages. Checkout runs on Gumroad's own pages, and cookies set there fall under Gumroad's policies.
Your Controls
This low-impact analytics setup does not use a consent choice. You can remove its cookies through your browser, use Google's Analytics opt-out browser add-on, or object to this processing by contacting us at [email protected].
How we handle personal data beyond cookies is covered in the privacy policy.
Questions about cookies or this policy: [email protected]. NowSquare, registered in the Netherlands (KvK 17148641), is the controller for this website.