Cookie Policy
Cookies are small files a website stores in your browser. This policy lists the cookies and similar technologies (such as local storage) used on www.shelfy.ai, the Shelfy dashboard, the customer library and the creators' storefronts and checkouts hosted by Shelfy. It completes our Privacy Policy.
Latest update: November 4, 2026
Your choice
On your first visit we ask which optional cookies you accept. Nothing optional is set until you choose. Closing the banner rejects them. We remember your choice for 6 months, then ask again. We also ask again if we add new optional trackers.
You can change your choice at any time from "Cookie settings" in the site footer, at the bottom of every storefront, in the dashboard account menu, in the customer library, or here: . You can also delete cookies from your browser settings.
Necessary
These are needed for the service to work, so they don't need consent: they keep you signed in, remember your language and your cookie choice, and protect payments.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| shelfy_consent | Shelfy | Remembers your cookie choice | 6 months |
| Next-Locale | Shelfy | Remembers your language | Session |
| __Secure-next-auth.session-token | Shelfy | Keeps creators signed in to the dashboard | Up to 30 days |
| __Secure-next-auth.csrf-token, __Secure-next-auth.callback-url | Shelfy | Protects sign-in forms | Session |
| __Host-shelfy.customer-session | Shelfy | Keeps buyers signed in to the customer library | Up to 30 days |
| __Host-shelfy_email_unsubscribe, __Host-shelfy_newsletter_unsubscribe | Shelfy | Confirms an unsubscribe request | Up to 30 minutes |
| shelfy_newsletter_*, shelfy_release_warning_* | Shelfy | Remembers dismissed notices in the dashboard | 12 hours |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention during checkout | 1 year / 30 minutes |
The dashboard and customer library also use your browser's local storage for things like unsaved drafts, a pending sign-in and dismissed banners. This data stays on your device. Video playback quality in the customer library is measured by Mux, our video provider, without cookies.
Analytics (with consent)
We use PostHog, hosted in the EU, to understand how Shelfy is used and improve it. If you are a signed-in creator, we link this data to your account.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| ph_<project>_posthog | PostHog | Recognises your browser across visits (cookie and local storage) | 1 year |
Marketing (with consent)
Meta pixels measure the results of ads. Shelfy uses its own pixel on www.shelfy.ai and in the dashboard. A creator can add their own pixel to their storefront and checkout: in that case the creator and Meta decide how that data is used. When you accept, we may also send Meta the purchase or sign-up event from our servers, with your email and name in hashed form.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta | Identifies your browser for ad measurement | 90 days |
| _fbc | Meta | Stores the ad you clicked on | 90 days |
Emails
Emails that creators send through Shelfy (newsletters, broadcasts and automations) can contain an invisible image and tracked links that tell the creator whether you opened the email and which links you clicked. The creator decides whether to use them. You can turn them off for a creator from the unsubscribe link at the bottom of any of their emails, and keep receiving the emails. Many email apps also let you block images.
Content from other platforms
Storefronts can include videos, posts and music from YouTube, Spotify, Apple Music, TikTok and Instagram, added by the creator. These are loaded from the platform that hosts them, which may set its own cookies and receives your IP address under its own policy. YouTube videos load in privacy-enhanced mode only when you press play. Details are in the Privacy Policy.
Contact us
Shelfy Srls
P.IVA 11119861216
Email: help@shelfy.ai