Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites function correctly, work more efficiently, and to provide analytics information to site operators.
Cookies set by the website operator (in this case, Smart Money API) are called "first-party cookies." Cookies set by parties other than the website operator are called "third-party cookies." Third-party cookies enable third-party features or functionality (such as payment processing and authentication) to be used on or through the website.
Cookies may be "session cookies," which expire when you close your browser, or "persistent cookies," which remain on your device for a set period or until you delete them.
Smart Money API uses cookies and similar technologies (such as localStorage and sessionStorage) to:
We do not use cookies for advertising, retargeting, or to track you across unrelated third-party websites.
These cookies are strictly necessary for the Service to function. They cannot be disabled without breaking core functionality such as authentication and security. No consent is required to set these cookies under GDPR, as they are necessary for contract performance.
| Cookie Name | Purpose | Duration |
|---|---|---|
| __session | Firebase Authentication session token — keeps you logged in | Session / 14 days |
| firebase:authUser | Firebase local auth state stored in localStorage | Persistent |
| sma_theme | Your selected UI theme preference (dark/light) | 1 year |
| sma_cookie_consent | Stores your cookie consent choice (all cookies or essential only) | Until you clear your browser's site data |
| CSRF token | Cross-site request forgery protection for form submissions | Session |
The keys below help us understand how visitors use our website and which links bring them here. They are set only after you accept analytics cookies in the cookie consent banner, except sma_ref and sma_friend, which are explained in their rows. If you withdraw your consent, the other keys are deleted.
| Cookie / Storage Key | Purpose | Duration |
|---|---|---|
| sma-sid | A random identifier for your current visit, used to group the pages you view into one visit. Set only after you accept analytics cookies. | Until you close the tab |
| sma-campaign | Records which campaign link brought you here: its utm_ tags and any gclid or msclkid click ID, for the first and the latest link of your visit. Set only after you accept analytics cookies. | Until you close the tab |
| sma_vid | A random identifier for this browser, so that a referral click counts one person rather than one network address. Set only after you accept analytics cookies, and only when you arrive through a referral link. Removed when you withdraw your consent. | Until you withdraw your consent or clear site data |
| _ga, _ga_Q607E7FZ6G | Set by Google Analytics 4 only after you accept analytics cookies: a random identifier for this browser and the state of your current session, which Google Analytics uses to tell visitors and visits apart. | Up to 2 years (browsers may shorten this) |
| sma_ref | Records the referral code from a ?ref= link, so that the person who referred you is credited. Set when you open a referral link, whether or not you have made a cookie choice. Our server sets it as well. | Up to 90 days as a cookie (some browsers shorten this). The copy in local storage stays until you clear site data. |
| sma_friend | Records the friend code from a ?fref= link, so that the friend who invited you is credited. Set when you open such a link, whether or not you have made a cookie choice. | Up to 90 days as a cookie (some browsers shorten this). The copy in local storage stays until you clear site data. |
Google Tag Manager is a Google service that loads on most pages of this website, before you make any choice. Loading it is a request to Google, so Google receives your IP address and browser details even if you decline analytics cookies. Until you accept analytics cookies, it sets no cookie and sends no analytics data.
After you accept analytics cookies, Google Analytics 4 sets the cookies _ga and _ga_Q607E7FZ6G and sends Google data about your visit, including the full address of the page you view with any parameters in it, the page title, the random identifier stored in the cookie, your language and your screen size. Google also receives your IP address. If you withdraw your consent, sending stops and these cookies are deleted.
Some pages of our Service involve third-party providers that may set their own cookies. We have limited control over these cookies; please refer to each provider's privacy and cookie policy for details.
When you sign in using Google, Firebase Authentication sets cookies and uses localStorage to manage your session. These are essential for the authentication flow. Google's cookie information: policies.google.com/technologies/cookies.
When you access billing or subscription pages, Stripe may set cookies to prevent fraud and ensure secure payment processing. These cookies are essential to Stripe's fraud detection systems. Stripe's cookie policy: stripe.com/cookie-settings.
| Cookie | Provider | Purpose |
|---|---|---|
| __stripe_mid | Stripe | Fraud prevention, device fingerprinting for payment security |
| __stripe_sid | Stripe | Session-level fraud prevention during checkout |
Cloudflare, our CDN and security provider, may set cookies for bot detection and DDoS mitigation. These are security-essential and cannot be disabled. Cloudflare's cookie policy: cloudflare.com/cookie-policy.
| Cookie | Purpose | Duration |
|---|---|---|
| __cf_bm | Bot management — distinguishes humans from automated traffic | 30 minutes |
| cf_clearance | Records passing of a Cloudflare security challenge | 1 day |
When you first visit Smart Money API, a cookie consent banner allows you to accept all cookies or essential cookies only. You can change your preference at any time by clicking "Cookie Settings" in the website footer.
You can also control cookies through your browser settings. Most browsers allow you to:
Instructions for common browsers:
Note: Disabling essential cookies will prevent you from logging in and accessing paid features of the Service.
Some preferences are stored using browser localStorage rather than cookies. You can clear this data through your browser's developer tools or by clearing site data. This will log you out and reset preferences.
Under GDPR, you have the right to:
To exercise these rights, use our contact form.
We may update this Cookie Policy as we add or change features, or as laws evolve. Updates will be reflected with a new "Last Updated" date. Material changes will be communicated via the cookie consent banner on your next visit.
Questions about our use of cookies? Contact us:
Contact: Contact Form
Contact form: smartmoneyapi.com/contact