Cookie policy
Last updated: October 31, 2026
Cookies are small files a website stores in your browser. Local storage, pixels and scripts work in a similar way. This page lists every one we found on our store and what you can switch off.
Your choice
Our banner offers three equal buttons: Accept all, Reject all and Choose. Analytics (and Advertising, once we switch it on) stay off until you allow them. You can change or withdraw your choice at any time with "Cookie settings" at the bottom of every page or on Your Privacy Choices. When you withdraw Advertising, we delete the AppLovin cookie and reload the page so the pixel stops. A Global Privacy Control or Do Not Track signal from your browser keeps Advertising off, and also keeps our own visit statistics off. When you withdraw Analytics we delete our visitor and visit ids (gh-t-v, gh-t-s) from your browser.
1. Necessary (always on)
Needed to show the store, keep your cart, take payment safely and remember your choice. They cannot be switched off here, but you can block them in your browser; the cart and checkout may then not work.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
storefront-cart (local storage) | Gift Haven | Keeps the items and designs in your cart. | Until you empty the cart or clear site data |
gh-consent-v2, gh-consent-log (local storage) | Gift Haven | Remembers your cookie choice with its date and banner version (proof of consent). | 12 months, then we ask again |
storefront-handed-quotes (local storage) | Gift Haven | Keeps the price quote (in US dollars) handed from the cart to checkout. | Until cleared |
whop-checkout-* (local and session storage) | Gift Haven checkout | Prevents double payments and restores your checkout after a bank or wallet redirect. | Session, or until the order is settled |
__cf_bm (cookie) | Cloudflare, on gift-haven.com, whop.com and whop.tw | Bot and abuse protection. | 30 minutes |
Payment form cookies | Whop (payment provider) on the checkout page | Secure card entry and fraud prevention. | Set by Whop |
2. Platform scripts we do not control
Our store runs on Whop's platform and Cloudflare's network. They add the following to every page, independent of the banner. We list them so you know they are there. You can block them with your browser or a content blocker, and Whop's own privacy policy explains its use: whop.com/privacy.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_wuid, _wuid_link (cookies); _wuid, _wuid_link_domain, _wfp, _wsc_probed_at (local storage); _wsc_probed (session storage); scripts from t.whop.tw | Whop, Inc. (our hosting and checkout platform) | Whop's platform analytics and sale attribution (page views and conversions for the store), including a browser fingerprint (_wfp). Whop adds this script to every store page; we do not control it. | Cookies about 400 days; storage until cleared |
Cloudflare Web Analytics (static.cloudflareinsights.com) | Cloudflare, Inc. | Counts visits and page speed without cookies. | No cookie |
Google Fonts (fonts.googleapis.com, fonts.gstatic.com) | Google LLC | Delivers the fonts on this site. Google receives your IP address and browser data. | No cookie |
3. Analytics (only with your consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
gh-t-v (local storage) | Gift Haven (first-party) | A random visitor id, the date of your first visit and how many visits you made, so our own statistics can tell new from returning visitors. Contains no name, email or other personal details. | Until you withdraw consent (we delete it) or clear site data |
gh-t-s (local storage) | Gift Haven (first-party) | The current visit: a random visit id, its start time and the campaign tags of the link you came from (utm_* and ad click ids such as gclid, fbclid, ttclid or AppLovin's). | A visit ends after 30 minutes without activity; deleted when you withdraw consent |
gh-t-purchases (local storage) | Gift Haven (first-party) | Order numbers already counted, so a purchase is not counted twice when you reload the confirmation page. | Last 30 orders, until cleared |
Visit statistics sent to /api/t | Gift Haven, stored with our database host Supabase, Inc. (US) | Pages viewed, time on page and scroll depth, buttons and links clicked (their label, never what you type), which personalization fields you used (field name, whether filled, number of characters, fixed choices such as color or size), photo upload success, preview, cart, checkout steps and purchase (order number and value), page errors and speed, device type, browser, operating system, screen size, language, time zone, approximate country and where you came from. Never the text you type, your photos, email, address or payment details. | Kept 13 months, then deleted automatically |
Store events (view product, add to cart) sent with window.whop.track | Whop, Inc. | Shows us which products and pages work. Uses Whop's identifiers above; adds no new cookie. | No extra cookie |
4. Advertising with AppLovin (only with your consent)
Current status: advertising with AppLovin is switched off on this site. The AppLovin pixel does not load, no AppLovin cookie is set and no information is shared with AppLovin. The description below explains how it would work if we switch it on; we would ask for your consent first.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
AppLovin (Axon) pixel: scripts from s.axon.ai and res4.applovin.com | AppLovin Corporation | Receives page views, product views, add to cart, checkout started and purchases (product ids, names, prices, order value, order number), with IP address, device and browser data. Used to show our ads on other apps and sites, for interest-based advertising, to measure ads and to improve AppLovin's services including its AI technology. | Loads only after you allow Advertising |
_axwrt (cookie) | AppLovin Corporation (first-party cookie on gift-haven.com) | Recognizes your browser so AppLovin can link ad clicks and purchases. | Set by AppLovin; deleted by us when you withdraw consent |
We use AppLovin Corporation as a third-party advertising partner. We never send AppLovin the names, texts or photos you put in a design.
For more information about AppLovin's collection and use of your information visit: https://legal.applovin.com/privacy/
Questions
Email support@gift-haven.com. More about how we use personal information: Privacy policy.