Cookie Policy
Last Updated: August 24, 2026
Cookies are small text files a website stores in your browser. They let a site remember something between one page and the next — that you are signed in, or that this is your second visit rather than your first.
PointsFly keeps this deliberately small. We use them to keep you signed in securely, and to understand in aggregate which pages and guides people find useful. A few more are set by content we embed from other services — a YouTube video or an Instagram post inside a blog article. Everything we set or know of is listed below, grouped by what it is for.
We never store card numbers, security codes, or banking passwords in a cookie, and we do not sell the information these cookies produce.
Strictly Necessary
Required for the site to work. These keep you signed in and protect your session, so they cannot be switched off from within PointsFly.
| Cookie / Storage | Provider | Category | Purpose | Domain |
|---|---|---|---|---|
__client_uat | Clerk | Strictly Necessary | Records whether you are currently signed in. | .pointsfly.ai |
__session | Clerk | Strictly Necessary | Short-lived token that authenticates your signed-in session. | .pointsfly.ai |
__clerk_handshake | Clerk | Strictly Necessary | Temporary values used while a session is verified or renewed.Only while signing in or refreshing a session | .pointsfly.ai |
csrftoken | Strictly Necessary | Protects the embedded Instagram post against cross-site request forgery.Only on blog articles that embed an Instagram post | .instagram.com |
__client_uatRecords whether you are currently signed in.
- Provider
- Clerk
- Category
- Strictly Necessary
- Domain
- .pointsfly.ai
__sessionShort-lived token that authenticates your signed-in session.
- Provider
- Clerk
- Category
- Strictly Necessary
- Domain
- .pointsfly.ai
__clerk_handshakeTemporary values used while a session is verified or renewed.
Only while signing in or refreshing a session- Provider
- Clerk
- Category
- Strictly Necessary
- Domain
- .pointsfly.ai
csrftokenProtects the embedded Instagram post against cross-site request forgery.
Only on blog articles that embed an Instagram post- Provider
- Category
- Strictly Necessary
- Domain
- .instagram.com
Analytics
Help us understand, in aggregate, which pages and guides are actually useful. We do not use them to identify you personally.
| Cookie / Storage | Provider | Category | Purpose | Domain |
|---|---|---|---|---|
_ga | Analytics | Distinguishes unique visitors using a pseudonymous identifier. | .pointsfly.ai | |
_ga_* | Analytics | Tracks your current visit and how you arrived at the site. | .pointsfly.ai |
_gaDistinguishes unique visitors using a pseudonymous identifier.
- Provider
- Category
- Analytics
- Domain
- .pointsfly.ai
_ga_*Tracks your current visit and how you arrived at the site.
- Provider
- Category
- Analytics
- Domain
- .pointsfly.ai
Marketing
Set by third parties whose content we embed, or by advertising measurement. Most appear only on specific pages — a blog article containing a video or an Instagram post, for example.
| Cookie / Storage | Provider | Category | Purpose | Domain |
|---|---|---|---|---|
_gcl_au | Marketing | Attributes a sign-up to the campaign that referred you.Only while Google Ads conversion tracking is active | .pointsfly.ai | |
VISITOR_INFO1_LIVE | YouTube | Marketing | Estimates connection speed and informs YouTube ad profiling.Only on pages with an embedded YouTube video | .youtube.com |
YSC | YouTube | Marketing | Counts views of embedded videos during this browser session.Only on pages with an embedded YouTube video | .youtube.com |
VISITOR_PRIVACY_METADATA | YouTube | Marketing | Stores the cookie choice you set inside the YouTube player.Only on pages with an embedded YouTube video | .youtube.com |
datr | Marketing | Recognises the browser for embed security and ad attribution.Only on blog articles that embed an Instagram post | .instagram.com | |
ig_did | Marketing | Identifies your device to Instagram embeds.Only on blog articles that embed an Instagram post | .instagram.com | |
mid | Marketing | Device identifier used across Meta products.Only on blog articles that embed an Instagram post | .instagram.com |
_gcl_auAttributes a sign-up to the campaign that referred you.
Only while Google Ads conversion tracking is active- Provider
- Category
- Marketing
- Domain
- .pointsfly.ai
VISITOR_INFO1_LIVEEstimates connection speed and informs YouTube ad profiling.
Only on pages with an embedded YouTube video- Provider
- YouTube
- Category
- Marketing
- Domain
- .youtube.com
YSCCounts views of embedded videos during this browser session.
Only on pages with an embedded YouTube video- Provider
- YouTube
- Category
- Marketing
- Domain
- .youtube.com
VISITOR_PRIVACY_METADATAStores the cookie choice you set inside the YouTube player.
Only on pages with an embedded YouTube video- Provider
- YouTube
- Category
- Marketing
- Domain
- .youtube.com
datrRecognises the browser for embed security and ad attribution.
Only on blog articles that embed an Instagram post- Provider
- Category
- Marketing
- Domain
- .instagram.com
ig_didIdentifies your device to Instagram embeds.
Only on blog articles that embed an Instagram post- Provider
- Category
- Marketing
- Domain
- .instagram.com
midDevice identifier used across Meta products.
Only on blog articles that embed an Instagram post- Provider
- Category
- Marketing
- Domain
- .instagram.com
Changes to This Policy
As PointsFly grows we may add or remove the services we rely on. When that changes what is stored in your browser, we will update this page along with the date at the top of it.
Questions About Privacy
If you have a question about cookies, your data, or anything else in this policy, we are happy to answer it. You can also read our full Privacy Policy.
info@pointsfly.ai