This policy explains what cookies GoTo.now sets and why. The short version: we use a session cookie to keep you signed in, and we do not set cross-site tracking cookies on people who click short links.

Cookies we set on goto.now pages

Cookie	Purpose	Lifetime
`session`	Keeps you signed in and remembers links you created as a guest	Session / up to 30 days
`csrf_token`	Protects forms against cross-site request forgery	Session

The `session` cookie, plainly

It's how the dashboard knows you're you between pages, and how the homepage can show a guest the links they just made. Delete it and you're simply signed out - Nothing about your links changes.

What we deliberately don't set

No analytics cookies of our own, no advertising IDs, no fingerprinting scripts. Audit this site with your browser's devtools and the cookie jar looks almost embarrassingly empty - That's the point.

What happens when someone clicks a short link

Clicking a goto.now short link performs a standard HTTP redirect. The redirect itself does not set advertising or cross-site tracking cookies. Analytics shown to link owners are computed from standard server-side request data (referrer, user agent, IP-derived coarse location) in aggregate.

Third-party cookies

Public pages may load assets (fonts, icons) from CDNs which can set their own technical cookies subject to their policies. We do not run third-party advertising trackers on the redirect path.

Managing cookies

You can clear or block cookies in your browser settings. Blocking the session cookie means you can't stay signed in, but shortening links still works.

For more about data handling, see our Privacy Policy.

Last updated: July 21, 2026

Cookie Policy