Cookie Policy
Last updated: August 2026. This Cookie Policy explains how Sample Roll ("Sample Roll", "we", "us", or "our") uses cookies and similar technologies when you visit or use our website and services (the "Service"). It should be read together with our Privacy Policy, which describes how we handle personal data more broadly.
What are cookies and similar technologies?
Cookies are small text files placed on your device when you visit a site. They often include an identifier and may be session cookies (deleted when you close the browser) or persistent cookies (stored for a set period or until you delete them).
We also use similar technologies, including browser local storage and session storage, to save preferences and data on your device without always using a traditional cookie file. Where this policy refers to "cookies," it includes these technologies unless we say otherwise.
Why we use cookies
We use cookies and similar technologies to run the Service securely, remember your settings, and (where applicable) show advertising or load embedded content from partners. Depending on your region, we may rely on your consent for non-essential cookies, or on another lawful basis such as providing a service you asked for or legitimate interests—where allowed by law.
1. Strictly necessary (authentication and security)
When you sign in, we use HTTP cookies managed by our authentication system (for example, NextAuth.js-style session cookies) to keep you logged in, protect your account, and prevent abuse. These are required for core functionality; without them, sign-in and account features will not work reliably.
These cookies are typically first-party (set by our domain) and may be session-based or short-lived persistent cookies, depending on the "remember me" behavior and security settings we use.
We also set sr_consent, a first-party cookie that records your cookie choice so we can honor it and stop asking. It stores only the words "granted" or "denied", lasts about 180 days, and contains nothing that identifies you. Because it exists solely to remember a decision you made, we treat it as strictly necessary and do not ask for consent to set it.
2. Preferences and functionality (local storage)
To improve your experience, we store certain choices in your browser using local storage or session storage (not always visible as classic "cookies" in every browser UI, but similar in purpose). Examples include:
- Dig page settings such as filters, autoplay, and display preferences
- Interface state such as chop mode, onboarding hints, and sidebar-related flags
- Data that helps the app work offline in the browser session, such as temporary navigation or history where we offer it
- Other app-specific keys needed to sync your experience between visits on the same device
You can clear this data through your browser's settings (e.g. "clear site data"). Doing so may reset preferences or require you to sign in again.
3. Embedded media: YouTube
Sample Roll may embed or load YouTube players or use the YouTube API so you can discover and play videos. When you interact with YouTube content, Google may set or read cookies and use identifiers on their domains. That processing is governed by Google's policies, not ours.
For more information, see Google's How Google uses cookies, the YouTube Terms of Service, and Google's Privacy Policy.
4. Advertising (Google AdSense)
On certain pages (for example, the public blog and the Dig experience for users without an ad-free plan), we may load Google AdSense or similar display advertising for users who are not on an ad-free plan. Google and its partners may use cookies and similar technologies to measure delivery, limit how often you see an ad, and personalize ads where permitted.
If you subscribe to a plan that includes an ad-free experience where we offer it, we aim not to load those advertising scripts for that experience. Ad personalization and opt-out tools are described in Google's help center; you can also use industry tools such as the Digital Advertising Alliance (U.S.) or the Your Online Choices (EU) where available.
5. Advertising measurement (Meta Pixel)
We use the Meta Pixel (from Meta Platforms, Inc. — Facebook and Instagram) to measure the effectiveness of our advertising and understand actions people take on the Service, such as viewing pages, signing up, or completing a purchase. Meta may use cookies and similar technologies to attribute these actions and, where permitted, to show you relevant ads. You can manage ad personalization in your Facebook/Instagram ad settings and through the industry opt-out tools linked above.
Consent. If you are in the EEA, the UK, or Switzerland, the Meta Pixel does not load at all until you choose "Accept" in our cookie banner. Nothing is sent to Meta before that, and choosing "Reject" keeps it switched off. Elsewhere the pixel loads when you visit and the banner is informational; you can still turn it off at any time using the button at the top of this page.
6. Payments (Stripe)
If you purchase a subscription or other paid product, you may be redirected to a checkout experience hosted by Stripe (or processed via Stripe on our behalf). Stripe may use cookies and similar technologies for fraud prevention, session management, and compliance. See Stripe's Cookie Policy and Privacy Policy.
7. Understanding how people find us (first-party)
When you first arrive, we record how you got here so we can understand which posts, links, and campaigns bring people to Sample Roll. This is first-party only — the information stays with us and is not shared with any advertising network.
We store, once per visitor:
- The referring website your browser reports (for example, that you arrived from Instagram or Reddit) — the site address only, never the specific page you came from on someone else's site
- Any campaign tags in the link you clicked (the
utm_source,utm_medium,utm_campaign,utm_content, andutm_termparameters) - The page you landed on, and the country your request came from
To recognize this as a single first visit rather than counting every page you open, we set sr_vid, a first-party cookie holding a random identifier that lasts about 60 days. It is not linked to your name or email unless you later create an account, in which case we keep a copy of how you first found us on your account record. We do not use this to build advertising profiles or track you across other websites.
Separately, if you follow a creator's referral link we set shft_ref, a first-party cookie lasting about 60 days, so that creator is credited if you buy. It stores only the creator's referral code.
Retention
How long a cookie or stored value lasts depends on its purpose: session cookies expire when you close the browser; persistent cookies and local storage entries remain until they expire, we delete them as part of an update, or you clear your browser data. Third parties apply their own retention rules.
Your choices and controls
Our cookie banner. When you first visit, a banner explains that we use cookies and links to this policy. In the EEA, the UK, and Switzerland it offers "Accept" and "Reject", and no advertising or measurement technology loads until you accept. You can change your mind at any time with the Manage cookie preferences button at the top of this page, which clears your saved choice and brings the banner back.
Browser settings. Most browsers let you block or delete cookies and site data. Blocking all cookies may break sign-in or features that depend on storage.
Google and advertising. You can manage certain Google ad and personalization settings through your Google Account and tools linked from Google's privacy and ads help pages.
Do Not Track. Some browsers send a "Do Not Track" signal. There is no consistent industry standard; we do not guarantee a specific response to that signal today, but we describe our practices in this policy and our Privacy Policy.
EEA, UK, and similar regions
If you are in the European Economic Area, the United Kingdom, or another region with specific privacy laws, you may have rights regarding cookies and personal data (including access, correction, deletion, restriction, objection, and portability in some cases). See our Privacy Policy for how to exercise rights and our contact details. Non-essential cookies (such as some advertising cookies) may require consent under local law; essential cookies may be used as needed to provide the Service.
In practice, visitors we identify as being in the EEA, the UK, or Switzerland are shown a banner offering "Accept" and "Reject" before any advertising or measurement technology loads. We determine region from the country associated with your network request; where we cannot determine it, we apply the stricter treatment and withhold those technologies by default. Your choice is remembered in the sr_consent cookie and can be changed at any time from the button at the top of this page.
California and U.S. state privacy notices
Depending on where you live, you may have rights to know what personal information is collected, to delete certain information, and to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising, as those terms are defined by applicable law. We describe our practices in our Privacy Policy. For cookie-based advertising, you may use browser controls and the opt-out tools linked above.
Children
The Service is not directed at children under 13 (or the age required in your jurisdiction). We do not knowingly use cookies to profile children for marketing.
Changes to this Cookie Policy
We may update this Cookie Policy from time to time. We will post the updated version on this page and change the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.
Contact
For questions about this Cookie Policy or our use of cookies, contact us using the contact method provided on Sample Roll, or refer to the contact section of our Privacy Policy.