1. What Are Cookies
Cookies are small files placed on your device when you visit a website or use a web application. They allow the service to remember your session, prevent security attacks, and collect usage data. We also use one related technology (device fingerprinting) described separately.
2. Cookies We Use
Strictly necessary — no consent required
These are essential for the Service to function and cannot be disabled via our cookie settings. Blocking them in your browser will prevent login and payment from working.
| Cookie name | Provider | Purpose | Duration |
|---|
| amplify.auth.session / CognitoIdentityServiceProvider.* | AWS Amplify / Cognito | Stores your authenticated session. Required to stay logged in. | Session / configurable (default 1h, refreshable) |
| XSRF-TOKEN / _csrf | ViralMonkey | Cross-site request forgery (CSRF) protection. Security-critical. | Session |
| __stripe_mid | Stripe | Stripe fraud prevention on payment forms. Required for payment processing. | 1 year |
| __stripe_sid | Stripe | Stripe payment session identifier. | 30 minutes |
Analytics — consent required
Only active if you accept analytics cookies. Used to understand how the product is used — no personal data in events.
| Cookie name | Provider | Purpose | Duration |
|---|
| ph_[token]_posthog | PostHog (EU cloud) | Anonymised feature usage, page views, and user journeys. No PII in events. Helps us improve the product. | 1 year |
| ph_[token]_posthog_session | PostHog | Groups events within one browsing session. | Session |
Security technology — disclosed
Not a cookie, but disclosed here for full transparency:
| Technology | Provider | What it does | Duration |
|---|
| Device fingerprint hash | AWS / FingerprintJS | A one-way non-reversible hash of device characteristics generated at free trial activation. Used only to prevent one device claiming multiple free trials. Cannot identify you. Never shared with any third party. | 90 days, then deleted |
3. What We Do Not Use
- Advertising, targeting, or behavioural tracking cookies of any kind
- Social media tracking pixels (Meta, X, TikTok, Google Ads, etc.)
- Cross-site retargeting or remarketing cookies
- Any cookie that shares your data with advertisers or data brokers
4. Managing Your Preferences
A cookie consent banner is shown on your first visit with three options: Accept all, Reject non-essential, or Manage preferences. Change your selection at any time via the “Cookie Settings” link in the footer of every page.
Note: Disabling strictly necessary cookies prevents login and payment. We recommend keeping strictly necessary cookies enabled. Disabling analytics cookies has no effect on product functionality.
You can also manage cookies in your browser settings. Instructions for major browsers: Chrome · Firefox · Safari · Edge
6. Changes
Material updates notified by email and posted at viralmonkey.ai at least 14 days before taking effect.
ViralMonkey Ltd (incorporating June 2026)Cookie/privacy queries: privacy@viralmonkey.ai · Website: viralmonkey.ai
Version history
v1.0 · 2 June 2026 · Initial publication