Last updated: 20 October 2026
ShinyCatch uses two cookies of its own and no advertising cookies.
The device cookie
We set one cookie, tcgm_device, the first time a browser visits: a random identifier for the browser, kept for a year, sent only to us and never readable by the page's scripts. It is how we notice several accounts using one device, which we review for referral and auction fraud. Each time a signed-in account buys, bids, lists, enters a giveaway or signs up from a device, we note the device and the network it came from (reduced and hashed, never kept as an address) for 90 days.
The sign-in cookie
When you sign in, a session cookie keeps you signed in on that browser until you sign out or it expires. Without it the site cannot know who you are, so blocking it means you cannot sign in.
Analytics and errors
We count which screens and actions are used with a usage analytics service. It keeps what it needs in memory for the page you are on and sets no cookie. Error reports go to an error reporting service and set no cookie either.
Payments
Card payments happen on Stripe's own checkout page, which uses Stripe's cookies under Stripe's notice.
Notifications on your phone
Turning on notifications stores that device's push subscription with us, not a cookie. How long we keep it, and what a notification carries, is in the privacy notice.
Managing cookies
You can clear or block cookies in your browser's settings. Clearing the sign-in cookie signs you out; clearing the device cookie gives the browser a new identifier on its next visit.