Skip to main content

Recent Searches

No recent searches

    Popular Articles

      Articles

      View all

        Topics

        View all

          Tickets

          View all
            no results

            Sorry! nothing found for

            Scratch Cookies Policy

            Modified on Mon, 19 Oct at 12:08 PM

            TABLE OF CONTENTS


            The Scratch Cookie Policy was last updated October 19, 2026


            This Cookie Policy (the “Cookie Policy”) is provided by Scratch Foundation (“Scratch”, “we” or “us”). It supplements the information and disclosures included in our Privacy Policy, and explains how Scratch uses Cookies on its websites scratch.mit.edu and scratchfoundation.org (the “Scratch Websites”) to its visitors (“you”, “user”). For the purpose of this Cookie Policy, “Personal Information” means any information relating to an identified or identifiable individual.

            When you use the Scratch Websites, we use cookies, beacons, invisible tags, unique IDs and similar technologies (collectively “Cookies”) to automatically record certain Personal Information from your browser or device.

            What types of Cookies are used on the Scratch Website?

            Essential Cookies

            These are Cookies that are necessary to make the Scratch Websites available to the user or ensure security. We use this Personal Information, for example, to ensure that the Scratch Websites functions properly, or to prevent fraud. We use the following essential Cookies:


            We place the following essential Cookies on scratchfoundation.org:

            Name

            Provider

            Purpose

            Expiration

            __Host-next-auth.csrf-token

            Scratch

            Used as a security measure to prevent cross site request forgery.    

            Session

            __Secure-next-auth.callback-url

            Scratch

            Used to redirect the user back to the intended page post-login. 

            Session

            __cf_bm

            Cloudflare (Givebutter)

            This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website. 

            Around 30 minutes

            cf_clearance

            Cloudflare (Givebutter)

            This cookie is used by the CloudFlare service to identify trusted web traffic and override any security restrictions based on the visitor’s IP address. It is essential for supporting a website’s security features and in providing protection against malicious visitors.

            1 year

            _grecaptcha

            Google reCAPTCHA

            Used to distinguish human visitors from automated bots in order to protect the Website's forms and secure areas (e.g. sign-in, donation and checkout flows) from spam and abuse. No tracking identifier is stored.

            6 months

            wc_cart_hash

            WooCommerce

            Helps WooCommerce detect when the contents of the shopping cart change so that the cart is kept up to date. 

            Session

            wc_fragments

            WooCommerce

            Allows WooCommerce to refresh the cart contents without reloading the page.

            Session

            wc_cart_created

            WooCommerce

            Records the time at which the shopping cart was first created for the session.

            Session

            __stripe_mid

            Stripe

            Third-party cookie set by Stripe to identify the browser/device across visits for payment-fraud prevention. 

            1 year

            __stripe_sid

            Stripe

            Third-party cookie set by Stripe to identify the payment session for fraud prevention.

            30 minutes

            XSRF-TOKEN

            GiveButter

            This cookie is written to help with site security in preventing Cross-Site Request Forgery attacks.

            2 days


            Functional Cookies

            We use these cookies to recognize the user when they return to the Scratch Websites, and for beneficial, but non-essential functionality. For example, Cookies to remember users’ settings (e.g., retaining language settings) and content preferences when they return to the Scratch Websites, or that allow videos to play. Disabling functional Cookies will typically result in limited functionality of the site and a less personalized experience, but the user will still be able to use the site as such. We use the following functional Cookies:


            We use the following functional Cookies on scratchfoundation.org: 


            Name

            Provider

            Purpose

            Expiration

            yt-icons-last-purged

            YouTube

            Local storage key written by the embedded YouTube player that records when YouTube last purged its cached icon sprites. Player housekeeping, not a tracking identifier.

            Persistent

            __Secure-ROLLOUT_TOKEN

            YouTube

            Used by YouTube to manage the phased rollout of new features and updates.

            5 months 27 days

            ytidb::LAST_RESULT_ENTRY_KEY

            YouTube

            Stores the user's video player preferences using embedded YouTube video.

            Persistent

            VISITOR_PRIVACY_METADATA

            YouTube

            To store the user’s cookie consent state for the current domain.

            5 months 27 days


            Analytical or Performance Cookies


            We use Cookies to generally help us better understand how the Scratch Websites is being used (e.g., determining which pages are popular based on how many users have visited certain pages). We also work with analytics providers, such as Google Analytics, which use Cookies to collect and analyze information about use of the Scratch Websites and report on activities and trends. You can learn more about Google’s practices by going to https://www.google.com/policies/privacy/partners and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. We use the following analytical and performance Cookies on both Websites:


            Name

            Provider

            Purpose

            Expiration

            _ga

            Google Analytics 

            Used to send data to Google Analytics about the user's device and behavior. Tracks the user across devices and marketing channels.    

            2 years


            We also use the following additional performance Cookies on scratch.mit.edu: 


            Name

            Provider

            Purpose

            Expiration

            _ga_3FZMRJWZR6

            Google Analytics

            Used to persist session state. 

            1 year 1 month


            We use the additional performance Cookies on scratchfoundation.org: 


            Name

            Provider

            Purpose

            Expiration

            __kla_id

            Klaviyo

            Used to track when someone accesses our website through a Klaviyo email

            1 year 1 month

            _ga_#

            Google Analytics

            Used to distinguish individual users to calculate visits and sessions.

            2 years

            _ga_S8DZNTYMWL

            Google Analytics

            Used to persist session state.

            1 year 1 month

            m

            Stripe

            Supports performance and caching of payment-processing resources.

            1 year 1 month


            Advertising Cookies

            These Cookies may be set through the Scratch Websites by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly identifiable personal information but are based on uniquely identifying your browser and internet device. If you do not allow these Cookies, you will experience less targeted advertising.


            We use the following Cookies on scratchfoundation.org:


            Name

            Provider

            Purpose

            Expiration

            _fbp

            Meta

            Used by Meta to identify visitors for personalized advertising.

            3 months

            _gcl_au

            Google Ads

            Used by Google Ads to measure the efficiency of advertisements across websites that use its services (conversion attribution).

            2 months 29 days

            _gcl_ls

            Google

            Local storage key used by the Google conversion linker to help measure advertising conversions.

            Persistent

            __Secure-YNID

            Google / YouTube

            Set by Google/YouTube; reported by the scanner under advertising. Used to detect and resolve problems with the service.

            5 months 27 days

            __Secure-BUCKET

            YouTube/Google

            Records the last external URL from which the user reached the Website (used by Meta for attribution).

            5 months 27 days

            lastExternalReferrer

            Meta

            Records the last external URL from which the user reached the Website (used by Meta for attribution).

            Persistent

            lastExternalReferrerTime

            Meta

            Records the time at which the user reached the Website from an external referrer (used by Meta for attribution).

            Persistent

            klaviyoOnsite

            Klaviyo

            Local storage key used by Klaviyo’s onsite tracking to associate browsing activity with a visitor for marketing purposes.

            Persistent

            klaviyoFormSubmit

            Klaviyo

            Records that a Klaviyo onsite form has been submitted during the session.

            Session

            klaviyoPagesVisitCountV2

            Klaviyo

            Counts the number of pages a visitor views during the session for Klaviyo onsite tracking.

            Session

            kl-post-identification-sync

            Klaviyo

            Stores an anonymous visitor’s onsite events (for up to 14 days) so that they can be synced to the visitor’s profile once the visitor is identified.

            Persistent

            $referrer

            Klaviyo

            Records the referring URL for the visitor’s current Klaviyo-tracked session.

            Persistent

            $last_referrer

            Klaviyo

            Records the referring URL from the visitor’s previous Klaviyo-tracked session.

            Persistent

            DEVICE_INFO

            YouTube

            Used to track a user’s interaction with embedded content.

            180 days

            VISITOR_INFO1_LIVE

            YouTube

            Tries to estimate user bandwidth on pages with integrated YouTube videos.

            Session

            YSC

            YouTube

            Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

            Session


            Third-party Cookies on the Scratch Websites

            As we explain above, we may employ third-party companies and individuals on our websites—for example, analytics providers and content partners. We grant these third-parties access to selected information to perform specific tasks on our behalf. They may also set third-party cookies in order to deliver the services they are providing. Third-party cookies can be used to track you on other websites that use the same third-party service. 


            How can you manage Cookies?

            Scratch is committed to offering you meaningful privacy choices. You have a number of options to object, control or limit how we, our partners, and other third parties use Cookies. You can block Cookies through the mechanisms described below. However, note that Cookies are important to many aspects of our Scratch Websites. If you disable all Cookies or do not consent to our use of Cookies, you may not be able to enjoy all features of the Scratch Websites. 

            Where Cookies are not strictly necessary for the Scratch Websites to function, we will ask you to consent to our use of Cookies when you first visit the Scratch Websites or use our platform. Consent can be provided or revoked by changing your settings in the cookie banner. 

            Moreover, if you do not wish to accept Cookies from us, you can instruct your browser to refuse Cookies from the Scratch Websites. Most browsers are configured to accept Cookies by default, but you can update these settings to either refuse Cookies altogether, or to notify you when a website is trying to set or update a Cookie. Most browsers allow you to control your Cookie settings so that you can: 

            • View your Cookies or other locally stored data and delete them on an individual basis;

            • Block first-party and/or third-party Cookies or similar technology;

            • Block all Cookies or similar technologies from being set; or

            • Delete all Cookies or similar technologies when you close your browser.

            To get information on how to update such settings, you may visit one of the following pages, or another page, depending on your browser:


            Changes to this Cookie Policy

            We will occasionally update this Cookie Policy to reflect changes in our practices and services. When we post changes to this Cookie Policy, we will revise the description of the ‘last updated’ date at the top of this cookie policy.


            If we make any material changes in the way we collect, use, or share information held in Cookies, we will notify you by prominently posting notice of the changes on the Scratch Websites and if required by applicable law we will request your consent for any such new uses. We recommend that you check this page from time to time to inform yourself of any changes in this Cookie Policy or any of our other policies.



            Contact Us

            If you have any questions about this Cookie Policy please contact us at privacy@scratch.mit.edu or via mail at:

            Scratch Foundation
            ATTN: Cookie Policy
            459 Columbus Avenue Unit #1112
            New York, NY 10024

            Was this article helpful?

            That’s Great!

            Thank you for your feedback

            Sorry! We couldn't be helpful

            Thank you for your feedback

            Let us know how can we improve this article!

            Select at least one of the reasons
            CAPTCHA verification is required.

            Feedback sent

            We appreciate your effort and will try to fix the article

            Preview
            0 of 0