Effective October 20, 2026
This Cookie Policy explains how Shako Statistics LLC ("Shako Stats," "we," "us") uses cookies and similar technologies on our website at https://shakostats.com and the Shako Stats application (collectively, the "Service"). It supplements our Privacy Policy.
A cookie is a small text file that a website stores in your browser. Cookies allow a website to recognize your browser across requests — for example, to keep you signed in or to protect your session from cross-site request forgery.
We also use related browser-storage technologies (such as localStorage and HTTP-only session storage) for similar purposes; for simplicity we refer to all of these collectively as "cookies" in this Policy.
These cookies are required for the Service to function and cannot be disabled without breaking authentication or security.
| Name | Purpose | Type | Expiry | HttpOnly |
|---|---|---|---|---|
shako_session_v1 | Authenticated session — keeps you signed in. Holds an encrypted session identifier. | Strictly necessary | 8 days | Yes |
shako_csrf_v1 | Cross-site request forgery protection — verifies that authenticated requests originated from the Service. | Strictly necessary | Session | No (must be readable by client to attach to requests) |
We use Google Analytics 4 (loaded via Google Tag Manager) on our marketing website to measure aggregate page views, traffic sources, and feature interest. These cookies are set by Google in your browser when you visit our marketing pages.
| Name (typical) | Set By | Purpose | Expiry |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique visitors | 2 years |
_ga_<container-id> | Google Analytics 4 | Persists session state for GA4 | 2 years |
_gid | Google Analytics | Distinguishes unique visitors (legacy) | 24 hours |
| GTM cookies | Google Tag Manager | Loads and manages tag containers | Varies |
We do not use Google Analytics for advertising targeting, remarketing, or audience-building. Google may, however, use the data for its own purposes under Google's Privacy Policy. You can opt out of Google Analytics on any site using the Google Analytics Opt-Out Browser Add-On.
When enabled, we use Amplitude Analytics and Session Replay on eligible website and customer application pages to understand usage, diagnose problems, and improve the Service.
Amplitude Analytics uses autocapture to collect page URLs and metadata, referrers, browser/device information, device and session identifiers, and interactions such as clicks and form activity. It uses first-party cookies and browser storage:
| Name (typical) | Set By | Purpose | Expiry |
|---|---|---|---|
AMP_<project-key-prefix> | Amplitude SDK | Device and session identifiers, event timing, analytics preferences | 1 year by default |
AMP_MKTG_<project-key-prefix> | Amplitude SDK | Campaign and referrer attribution | 1 year by default |
Session Replay temporarily buffers data in memory to reconstruct rendered page content and interactions such as clicks and scrolling. Our configuration selects 100% of eligible sessions for replay, subject to browser and SDK availability. The SDK's default replay settings mask form fields and text inputs; project privacy settings can override those defaults. Other displayed text, HTML attributes, and page URLs may be collected. Rendered application content may include Customer Data.
Collection excludes administrative, OAuth, account-verification, password-reset, development, and debugging routes. Amplitude receives data in the United States. These tools are for product analytics and improvement, not advertising targeting. See Amplitude's Privacy Notice.
We do not use:
If we add any of the above in the future, we will update this Cookie Policy and, where required by law, obtain your consent before enabling them.
When you authenticate with Google OAuth, Google may set its own cookies in your browser as part of that flow. Those cookies are governed by Google's Privacy Policy and Google's Cookie Policy, not by this Policy.
When you make a payment through Stripe, Stripe may set its own cookies for fraud prevention and session continuity in its hosted payment forms. Those cookies are governed by Stripe's Privacy Policy and Stripe's Cookie Policy.
You can block or delete cookies through your browser settings. If you block our strictly-necessary cookies, you will not be able to sign in or use the Service. Blocking cookies may not stop all analytics or Session Replay, which can use other browser storage or memory. For questions about analytics collection or privacy requests, contact info@shakostats.com.
Cookie settings for common browsers:
Some browsers send a "Do Not Track" (DNT) signal. There is no industry standard for how websites should respond to DNT, and we do not currently respond to DNT signals. We do not engage in cross-site behavioral tracking that DNT was designed to address.
We update this Policy when our use of cookies, analytics, or Session Replay changes. The current version is available at this URL with an updated Effective Date. For material changes, we will provide a prominent notice on the Service or notify affected account holders by email, as appropriate.
Questions about cookies: info@shakostats.com