Cookie Policy
Version 2.0. Effective date: 20 September 2026 (replaces the version dated 12 February 2026)
This Cookie Policy explains how MB "Reikalita" (ScrapeBadger) uses cookies and similar technologies on scrapebadger.com, docs.scrapebadger.com and the ScrapeBadger dashboard (together, the "Sites"). It should be read together with our Privacy Policy, which explains how we handle personal data generally.
1. What cookies are
Cookies are small text files that a website stores on your device so that it can recognise your browser, keep you signed in, remember your preferences or measure how the site is used. "Similar technologies" means local storage, session storage, pixels and scripts that do the same job. In this Policy we call all of them cookies.
Cookies set by us are "first-party" cookies. Cookies set by another company through our Sites are "third-party" cookies; that company can read them under its own privacy policy.
2. How we decide what to load
We only place cookies that are strictly necessary for the Sites to work without asking you. Every other cookie is loaded only after you accept it in the cookie banner. The banner appears on your first visit; you can accept all, reject all, or choose categories. Your choice is stored in a first-party cookie for twelve (12) months, after which we ask again. You can change your mind at any time by opening "Cookie settings" in the footer of any page.
Our API does not use cookies for authentication or tracking; API authentication uses API keys sent in request headers. API responses may carry Cloudflare security cookies, which are strictly necessary for bot and DDoS protection; we set no other cookies on the API.
3. The cookies we use
The tables below describe the cookies in use on the date of this Policy. The exact technical names and current durations of each cookie are shown in the cookie banner under "Cookie settings", which is the live list; we review it regularly.
3.1 Strictly necessary (always active)
These cookies are required to sign you in, keep the Sites secure and remember your consent choice. They cannot be switched off. Legal basis: our legitimate interest in operating a secure website; they are exempt from consent under the ePrivacy rules.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| Sign-in session | ScrapeBadger | Keeps you signed in to the dashboard | Session, or until you sign out |
| Security token | ScrapeBadger | Protects forms against cross-site request forgery | Session |
| Cookie consent | ScrapeBadger | Stores your cookie choices | 12 months |
| __cf_bm | Cloudflare | Distinguishes humans from bots to protect the Sites | 30 minutes |
| cf_clearance | Cloudflare | Records that you passed a Cloudflare security check | Up to 1 year |
| Turnstile (local storage) | Cloudflare | Human verification on sign-up and sign-in forms; uses local storage rather than a cookie | Session |
3.2 Functional (set only when you choose a preference)
These remember choices you actively make, such as switching to dark mode, so that you do not have to make them again. They are set only when you choose the preference and are exempt from consent as customisation you have asked for; you can clear them at any time in your browser. Without them the Sites still work, but preferences reset on each visit.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| Theme preference (local storage) | ScrapeBadger | Remembers light or dark mode | Until you clear it |
| Dashboard preferences (local storage) | ScrapeBadger | Remembers dashboard layout and filters | Until you clear it |
3.3 Analytics (consent required)
These help us understand how the Sites and the dashboard are used, which pages and features matter, and where people get stuck. On the public website the data is pseudonymous. In the dashboard, analytics events are linked to your Account so that we can see which features you use and support you; we do not use them for marketing and we do not share them with advertisers. Retention of analytics data is stated in the Privacy Policy (section 9).
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| ph_*_posthog (cookie and local storage) | PostHog | Product analytics: page views, clicks, feature usage, funnel and retention analysis, and session recordings | 12 months |
| _ga | Google Analytics | Distinguishes visitors | 2 years |
| ga[container id] | Google Analytics | Keeps session state | 2 years |
PostHog data is processed by PostHog, Inc. in the United States under the EU Standard Contractual Clauses. Session recordings replay how the page was used; they mask all text you type, any API response shown in the dashboard and any element we mark as sensitive, and they are never enabled on pages that display API keys or payment details. Google Analytics data is processed by Google Ireland Ltd., with some processing in the United States under the EU-US Data Privacy Framework; Google Analytics 4 does not store IP addresses, and we have Google Signals and advertising personalisation switched off.
3.4 Marketing (none)
We do not currently use advertising or marketing cookies, and we do not place pixels from advertising networks on the Sites. If that changes we will update this Policy and ask for your consent before loading any such cookie.
4. Third-party services that may set cookies
| Provider | Why it is on the Sites | Privacy information |
|---|---|---|
| Cloudflare, Inc. | Content delivery, security and Turnstile human verification | cloudflare.com/privacypolicy |
| PostHog, Inc. | Product analytics | posthog.com/privacy |
| Google Ireland Ltd. | Google Analytics; Google sign-in when you choose it | policies.google.com/privacy |
| GitHub, Inc. | GitHub sign-in when you choose it | docs.github.com/site-policy/privacy-policies |
| Stripe Payments Europe, Ltd. | Checkout and fraud prevention on payment pages; Stripe sets its own cookies (for example __stripe_mid, __stripe_sid) on those pages, which are necessary for fraud prevention | stripe.com/privacy |
| Embedded content (for example YouTube videos in the documentation) | Only loaded when you click to play; the provider may then set its own cookies | see the provider's policy |
5. Managing cookies
Cookie settings. Open "Cookie settings" in the footer of any page to change your choices. When you reject or withdraw consent for analytics, we switch the analytics tools to their "denied" or "opted-out" mode and expire the analytics cookies we control; any remaining third-party cookies are deleted when they expire or when you delete them in your browser.
Browser controls. All browsers let you view, block and delete cookies. Blocking strictly necessary cookies will stop you signing in to the dashboard.
Provider opt-outs. Google offers a browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout). PostHog does not set cookies on our Sites unless you accept analytics cookies in the banner.
Global Privacy Control and Do Not Track. We do not currently respond to Do Not Track or Global Privacy Control browser signals; use the cookie banner to set your choices.
6. Cookies and personal data
Some cookies, together with your IP address and device information, are personal data. Our Privacy Policy describes the legal bases, recipients, transfers and your rights. Analytics cookies rely on your consent; strictly necessary and functional cookies rely on our legitimate interest in running a secure website and providing the customisation you asked for.
7. Changes
We update this Policy when the cookies we use change. The effective date shows the current version. Where a change means we want to load a new non-essential cookie, we will ask for your consent again.
8. Contact
MB "Reikalita" (ScrapeBadger), Ramioji g. 12, Bajorų k., Vilniaus raj., Lithuania legal@scrapebadger.com, subject line "Privacy Request"