CD-07 · reviewed 2 June 2026
Browser Records
A single inventory of what this domain can leave in your browser, what the processor leaves in it, and the longer list of things that are deliberately never written.
standingNo banner asks your permission on this domain. Two functional records, plus whatever the processor writes inside its own frame, make up the entire set, and not one of them exists for tracking, advertising or measurement.
§1
Inventory
§1.1
One row per record a browser could conceivably pick up on this domain, in three states: written by the desk, written by the processor inside its own frame, or deliberately absent. The absent rows are listed because their absence is the point.
§1.2
| record | state | identifier | what it is for |
|---|---|---|---|
| Routing token | set by the desk | afx_route90 days | Written only when you arrive through a routing link a partner of the desk issued. The value is a random token that maps to the link: it names the partner, never you, and is read once, when a fill is credited. HttpOnly. |
| Console session | set by the desk | afx_hq8 hours | Written when desk staff sign into the back office. Signed and HttpOnly. No buyer's browser ever holds one. |
| Payment frame | set by the processor | Whop's ownper Whop's notice | Written inside Whop's frame, under Whop's cookie policy, so that a charge can be completed and screened. The frame will not operate without them, so a card payment cannot be made with them blocked. |
| Advertising identifier | not set | — | No campaign runs from this desk that would have anything to read. |
| Conversion pixel | not set | — | No page here reports your visit onward to a third party. |
| Product analytics | not set | — | Traffic is counted from the server's own request log, which carries no browser record at all. |
| Session replay | not set | — | Nothing records or replays what you did on a page. |
| Device fingerprint | not set | — | No signature is computed from your browser, fonts, canvas or clock. |
scroll sideways for every column →
§2
Refusing them
§2.1
Block or clear records for this domain in your browser settings. Every public page, the execution ticket included up to the point where the payment frame loads, renders correctly with nothing stored.
§2.2
Arriving through a routing link with storage blocked means only that the partner goes uncredited. Price, package, term and key are identical either way.
§2.3
Blocking the processor's records is the one choice with a consequence: the frame will not take a card. Write to the desk and the fill is taken by hand instead.
§3
Changes
§3.1
If a new record is ever needed it goes into the §1 table, with its name, life and purpose, before it is first written, and the review date at the head of this document moves on the same day.
§4
Contact
§4.1
[email protected]. Everything else the desk holds about a buyer is set out in personal data (CD-06).
questions about this document: [email protected] · quote the clause number