Cookie Policy
Version 2.1. Effective date: 16 October 2026 (replaces the version dated 20 September 2026)
This Cookie Policy explains how MB "Reikalita" (ScrapeBadger) uses cookies and similar technologies on scrapebadger.com, docs.scrapebadger.com and the ScrapeBadger dashboard (together, the "Sites"). It should be read together with our Privacy Policy, which explains how we handle personal data generally.
1. What cookies are
Cookies are small text files that a website stores on your device so that it can recognise your browser, keep you signed in, remember your preferences or measure how the site is used. "Similar technologies" means local storage, session storage, pixels and scripts that do the same job. In this Policy we call all of them cookies.
Cookies set by us are "first-party" cookies. Cookies set by another company through our Sites are "third-party" cookies; that company can read them under its own privacy policy.
2. How we decide what to load
Strictly necessary cookies are always placed, because the Sites cannot work without them. What happens with the other cookies depends on where you visit from:
- European Economic Area, United Kingdom, Switzerland, Canada, Brazil, South Korea and China, or if we cannot tell where you are visiting from. We ask first. The cookie banner appears on your first visit, and no analytics cookie or tool is loaded until you accept it. You can accept all, reject all, or choose categories.
- All other countries. We do not show the banner. By using the Sites you accept analytics cookies, which load by default. You can opt out at any time by opening "Cookie settings" in the footer of any page and rejecting analytics.
We work out your country from the network location Cloudflare reports for your visit, and remember it in the consent_country cookie (section 3.1). Your choice, whether you accepted, rejected or opted out, is stored in a first-party cookie for twelve (12) months. After that, we ask again if you are in a country where we show the banner. You can change your mind at any time in "Cookie settings".
Our servers also send some analytics events on your behalf, for example when you sign up, make your first API call or buy credits. They follow the same rule. These events go to PostHog and Google Analytics only in two cases: you accepted analytics, or you are in a country without the banner and have not opted out. For a signed-in user, the country is the one of your last visit to the dashboard. If we have neither an answer from you nor a country for you, nothing is sent.
Our API does not use cookies for authentication or tracking; API authentication uses API keys sent in request headers. API responses may carry Cloudflare security cookies, which are strictly necessary for bot and DDoS protection; we set no other cookies on the API.
3. The cookies we use
The tables below describe the cookies in use on the date of this Policy. The cookie banner, under "Cookie settings", also lists the technical name of every cookie and storage key in each category. That list is the live one, and we review it regularly. In a name, * stands for any characters.
3.1 Strictly necessary (always active)
These cookies are required to sign you in, keep the Sites secure and remember your consent choice. They cannot be switched off. Legal basis: our legitimate interest in operating a secure website; they are exempt from consent under the ePrivacy rules.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| better-auth.session_token (sign-in session) | ScrapeBadger | Keeps you signed in to the dashboard | Session, or until you sign out |
| better-auth.state (security token) | ScrapeBadger | Protects sign-in against cross-site request forgery | Session |
| bg_clear | ScrapeBadger | Records that your browser passed our abuse check, so that you are not checked again on every page | Typically 1 hour |
| cookie_consent | ScrapeBadger | Stores your cookie choices | 12 months |
| consent_country | ScrapeBadger | Remembers the country your visit comes from, so we know whether to show the cookie banner | 24 hours |
| __cf_bm | Cloudflare | Distinguishes humans from bots to protect the Sites | 30 minutes |
| cf_clearance | Cloudflare | Records that you passed a Cloudflare security check | Up to 1 year |
| Turnstile (local storage) | Cloudflare | Human verification on sign-up and sign-in forms; uses local storage rather than a cookie | Session |
3.2 Functional (set only when you choose a preference)
These remember choices you actively make, such as switching to dark mode, so that you do not have to make them again. They are set only when you choose the preference and are exempt from consent as customisation you have asked for; you can clear them at any time in your browser. Without them the Sites still work, but preferences reset on each visit.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| theme, scrape-badger-dark-mode (local storage) | ScrapeBadger | Remembers light or dark mode | Until you clear it |
| sb:code-sample-lang (local storage) | ScrapeBadger | Remembers the programming language you chose for code samples | Until you clear it |
| sb_onboarding_video_seen, sb_video_widget_dismissed (local storage) | ScrapeBadger | Remembers that you watched or closed a video, so that it is not shown again | Until you clear it |
badgerbot_anon_session, badgerbot_anon_verified_* (local storage) | ScrapeBadger | Keeps your conversation with the support chat assistant when you are not signed in | Until you clear it |
3.3 Analytics (consent required where we show the banner)
These cookies help us understand how the Sites and the dashboard are used: which pages and features matter, and where people get stuck. They also tell us which of our ads and affiliate links brought people to the Sites (section 3.4). In the countries listed in section 2 they load only after you accept them. Everywhere else they load by default until you opt out. On the public website the data is pseudonymous. In the dashboard, analytics events are linked to your Account so that we can see which features you use and support you. Retention of analytics data is stated in the Privacy Policy (section 9).
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
ph_*_posthog (cookie and local storage) | PostHog | Product analytics: page views, clicks, feature usage, funnel and retention analysis, and session recordings | 12 months |
_ga | Google Analytics | Distinguishes visitors | 2 years |
_ga_[container id] | Google Analytics | Keeps session state | 2 years |
_gcl_* | Google Ads | Records the ad click that brought you to the Sites, so that a later sign-up or purchase can be counted as a conversion from that ad | 90 days |
_fprom_* | FirstPromoter | Records the affiliate link that brought you to the Sites, so that the affiliate can be credited for your sign-up and payments | 30 days |
| sb_first_touch_v1 (local storage) | ScrapeBadger | Remembers the landing page, referrer and campaign (UTM) parameters of your first visit, for attribution | Until you clear it or opt out |
| sb_utm (session storage) | ScrapeBadger | The same campaign parameters for the current visit | Session |
| sb_oauth_method (session storage) | ScrapeBadger | Remembers that you chose Google or GitHub sign-in, so that we can tell a sign-up from a sign-in when you return | Until you return from the provider |
| sb_signup_counted (local storage) | ScrapeBadger | Makes sure a sign-up is counted only once | Until you clear it or opt out |
| fpr_signup_intent (session storage) | ScrapeBadger | Passes a new sign-up made with Google or GitHub sign-in to FirstPromoter | Session |
PostHog data is processed by PostHog, Inc. in the United States under the EU Standard Contractual Clauses. Session recordings replay how the page was used; they mask all text you type, any API response shown in the dashboard and any element we mark as sensitive, and they are never enabled on pages that display API keys or payment details. Google Analytics data is processed by Google Ireland Ltd., with some processing in the United States under the EU-US Data Privacy Framework; Google Analytics 4 does not store IP addresses, and we have Google Signals and advertising personalisation switched off.
3.4 Advertising and affiliate measurement (part of analytics)
We do not have a separate marketing category. Two of the tools in section 3.3 serve advertising and affiliate measurement. They follow your analytics choice:
- Google Ads. It loads through Google Tag Manager together with Google Analytics. It sets the
_gcl_*cookies and contacts Google's advertising domains (such as doubleclick.net), so that we can measure which of our ads lead to sign-ups and purchases. - FirstPromoter. It runs our affiliate programme. It sets the
_fprom_*cookies, so that an affiliate who referred you can be credited.
When analytics is off, neither tool is loaded.
We use Google Ads only to measure conversions. We do not use personalised advertising or remarketing. Through Google Consent Mode we tell Google that advertising personalisation is refused for every visitor, whatever your analytics choice, and our servers do the same when they send events to Google Analytics.
4. Third-party services that may set cookies
| Provider | Why it is on the Sites | Privacy information |
|---|---|---|
| Cloudflare, Inc. | Content delivery, security and Turnstile human verification | cloudflare.com/privacypolicy |
| PostHog, Inc. | Product analytics | posthog.com/privacy |
| Google Ireland Ltd. | Google Analytics, Google Ads and Google Tag Manager; Google sign-in when you choose it | policies.google.com/privacy |
| FirstPromoter | Affiliate programme tracking | firstpromoter.com/privacy |
| GitHub, Inc. | GitHub sign-in when you choose it | docs.github.com/site-policy/privacy-policies |
| Stripe Payments Europe, Ltd. | Checkout and fraud prevention on payment pages; Stripe sets its own cookies (for example __stripe_mid, __stripe_sid) on those pages, which are necessary for fraud prevention | stripe.com/privacy |
| Embedded content (for example YouTube videos in the documentation) | Only loaded when you click to play; the provider may then set its own cookies | see the provider's policy |
5. Managing cookies
Cookie settings. Open "Cookie settings" in the footer of any page to change your choices. In a country where we do not show the banner, this is also where you opt out of analytics. When you reject, opt out or withdraw consent for analytics, we switch the analytics tools to their "denied" or "opted-out" mode and expire the analytics cookies we control; any remaining third-party cookies are deleted when they expire or when you delete them in your browser.
Browser controls. All browsers let you view, block and delete cookies. Blocking strictly necessary cookies will stop you signing in to the dashboard.
Provider opt-outs. Google offers a browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout). PostHog, Google Analytics, Google Ads and FirstPromoter load on our Sites only while analytics is allowed. That means you accepted it in the banner, or you visit from a country where we do not show the banner and have not opted out.
Global Privacy Control and Do Not Track. We do not currently respond to Do Not Track or Global Privacy Control browser signals; use the cookie banner to set your choices.
6. Cookies and personal data
Some cookies, together with your IP address and device information, are personal data. Our Privacy Policy describes the legal bases, recipients, transfers and your rights. Analytics cookies rely on your consent. Where we show the banner, you give it there. Elsewhere, you give it by using the Sites without opting out. Strictly necessary and functional cookies rely on our legitimate interest in running a secure website and providing the customisation you asked for.
7. Changes
We update this Policy when the cookies we use change. The effective date shows the current version. Where a change means we want to load a new non-essential cookie, we will ask for your consent again.
8. Contact
MB "Reikalita" (ScrapeBadger), Ramioji g. 12, Bajorų k., Vilniaus raj., Lithuania legal@scrapebadger.com, subject line "Privacy Request"