Cookies on Autoflip.
Last updated: 09-10-2026
What we use
Autoflip sets no advertising or tracking cookie whatsoever. These are all the cookies we use:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| session_token | Keeps you logged in as a customer | 90 days | Strictly necessary |
| partner_session_token | Keeps you logged in as a partner | 90 days | Strictly necessary |
| lang | Remembers which language you want to see the site in | 1 year | Functional |
| af_ref | Remembers which partner link you came in through, so that partner gets their commission. Contains only the partner's code. | 30 days | Functional |
| ph_* | PostHog: measures which steps visitors take, so we can see where people get stuck. Processed in the EU. | 12 months | Statistics |
| _clck, _clsk | Microsoft Clarity: ties session recordings together, so a visit across several pages can be replayed as one whole. Processed in the United States. | _clck 1 year, _clsk 1 day | Statistics |
| post_login_next | Briefly remembers which page you want to return to after logging in | 30 minutes | Strictly necessary |
Statistics and session recordings
Since 12 August 2026 we use two tools to see where visitors get stuck. They load only if you tick the Statistics category. If you refuse, neither script loads and no cookie is set.
- PostHog counts which steps you take (for example: signed up, Telegram connected). You are recognised by an internal customer number, not by your email address or phone number. Processed on servers in the European Union.
- Microsoft Clarity makes session recordings: a rendering of mouse movements, clicks and scrolling on the page. No camera, no sound. Does not run on your dashboard, your account page or the partner pages. The Telegram connection code is masked in the recording. Microsoft processes this data in the United States, on the basis of the EU-US Data Privacy Framework (adequacy decision of the European Commission). Microsoft acts there as its own controller and also uses the data for its own purposes; see the Microsoft privacy statement.
You can change your choice at any time via the link at the bottom of every page. If you withdraw consent, both stop and Clarity erases its cookies.
What we do not use
- No Google Analytics, Plausible or Mixpanel
- No Facebook Pixel or advertising cookies
- No cross-site tracking
- No profiling cookies
- No sale or transfer of your data to advertisers
Our cookie preferences
The cookies that keep you logged in are strictly necessary and exempt from consent under art. 5(3) ePrivacy. There are also two functional cookies: your language choice and the partner code you came in with. And there are statistics cookies from PostHog and Microsoft Clarity, which are only set if you give consent for them. We use no marketing or advertising cookies. If you want to get rid of the functional cookies, delete them through your browser settings.
Third-party cookies when you click through
When you click "Open on 2dehands" (or another source) in a Telegram alert, you land on that external site. It then sets its own cookies. We have no control over that - refer to the cookie policy of the platform in question.
Fonts + assets
Our fonts and scripts are loaded entirely from our own server (self-hosted). No requests go to Google Fonts or other external CDNs, so no external platform sees your IP address when the site loads.