Legal

Cookie policy

Effective 19 September 2026 · What is stored on your device, and how to say no

The Shopmycode app itself uses only what it needs to keep you signed in. The tracking described below happens when you open a Shopmycode link, and you can switch it off for your browser on Your privacy choices. Browsers that send the Global Privacy Control signal get no tracking identifiers at all; visitors in the EU/EEA, UK and Switzerland are asked first and get none unless they say yes.

1. In the Shopmycode app (admin, marketer and brand portals)

Name	Kind	Purpose	Lasts
`admin_token`	Browser storage	Keeps you signed in	Until you sign out (token expires after 24 h)
`ax_days`, tab and layout preferences	Browser storage	Remembers the period and tab you last used	Until cleared
App shell cache	Service worker cache	Lets the installed app open instantly and offline	Replaced on each new version

These are strictly necessary for the app to work; no consent banner is required and none is shown. No analytics or advertising cookies are used in the app.

2. When you open a Shopmycode link (go.shopmycode.com, refrlink.com)

Name	Kind	Purpose	Lasts
`vid`	Cookie on the short-link domain	Recognises the same visitor on later opens so a result can be credited to the link that brought them	1 year
`refr_did`	Cookie on the short-link domain	Device id for the same purpose, also used to spot repeat opens	1 year
Device characteristics on the bridge page	Read once, not stored on your device	Screen, graphics renderer, rendering hash, CPU count, memory, time zone, connection type — to recognise the same device when cookies are blocked	Kept with the open for 13 months
`smc_consent`	Cookie on the short-link domain	Your answer on the consent page shown to visitors in the EU/EEA, UK and Switzerland ("yes" or "no")	1 year
`smc_privacy`	Cookie on the short-link domain	Records that you opted out — with this cookie present nothing above is set	1 year

3. On a brand's own site, if it installed our snippet

Name	Kind	Purpose	Lasts
`aff_ref`, `aff_link`, `aff_ref_ts`	Browser storage and cookie on the brand's site	Remembers which Shopmycode link brought you, so a sign-up or order on that site can be credited to it	90 days
`refr_did` / `aff_did`, `aff_vid`	Browser storage and cookie on the brand's site	Device and visitor id for the same purpose. Not created for visitors on the limited path or with Global Privacy Control	1 year
`refr_sess`, `refr_visit_count`, `refr_last_seen`	Browser storage	Tells a first visit from a return visit	Session / until cleared

The brand is responsible for telling you about the snippet in its own cookie notice and, where its law requires, for asking your consent before it runs.

4. How to opt out

Press Opt out of tracking on this browser on Your privacy choices. From then on, links opened in that browser set nothing and read nothing.
Turn on Global Privacy Control in your browser or an extension — we treat it exactly like the opt-out, on every domain we run.
Block or delete cookies in your browser settings. Links still work; some opens will simply not be matched to later results.

Opting out does not affect sign-in to the app, which needs its own storage to work.

5. Questions

legal@ttlmedia.in. See also the Privacy policy.