> For the complete documentation index, see [llms.txt](https://eu.support.backpack.exchange/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://eu.support.backpack.exchange/legal-documentation/cookies-policy/list-of-cookies.md).

# List of Cookies and Similar Technologies

This List supplements the [Cookies Policy](/legal-documentation/cookies-policy.md) and describes the cookies and similar technologies confirmed as currently used in the website eu.backpack.exchange and support flows. It distinguishes the lifetime of a cookie from the shorter lifetime of any token stored inside it.

The website eu.backpack.exchange does not currently deploy Google Analytics, advertising or targeting cookies.

## 1. Strictly necessary cookies and security technologies

These technologies are used only to operate, secure or provide a service requested by the user. They are not used for advertising or audience measurement.

<table><thead><tr><th>Provider</th><th width="183.4765625">Name / technology</th><th width="233.69140625">Storage and scope</th><th width="305.65234375">Purpose and trigger</th><th width="211.16015625">Retention</th></tr></thead><tbody><tr><td>Backpack EU</td><td>accessKey</td><td>HttpOnly, Secure cookie, host-only on api.eu.backpack.exchange</td><td>Maintains the authenticated user session. The access token contained in the cookie is valid for 10 minutes and is automatically refreshed.</td><td>Session cookie, deleted when the browser is closed. Token lifetime: 10 minutes.</td></tr><tr><td>Backpack EU</td><td>refreshKey</td><td>HttpOnly, Secure cookie, host-only on api.eu.backpack.exchange</td><td>Renews the authenticated web session without requiring the user to log in again.</td><td>2 days on the web.</td></tr><tr><td>Amazon Web Services / Backpack EU</td><td>aws-waf-token</td><td>Cookie scoped to .backpack.exchange</td><td>Supports bot detection and protects the signup and password-reset pages from automated abuse. The login page does not load the WAF SDK.</td><td>4 days.</td></tr><tr><td>Backpack EU / GitBook</td><td>gitbook-visitor-token</td><td>Cookie scoped to .backpack.exchange; issued by the Backpack EU API</td><td>Enables the support site to recognise a support session opened through the mobile application. It is not set during an ordinary visit to eu.backpack.exchange and is currently triggered only by the mobile app’s “open support” flow.</td><td>2 hours.</td></tr><tr><td>Cloudflare</td><td>__cf_bm</td><td>Third-party cookie set only on protected *.workers.madlads.com origins</td><td>Distinguishes legitimate traffic from automated traffic and supports bot management when a relevant protected origin is invoked.</td><td>Expires after 30 minutes of continuous inactivity.</td></tr><tr><td>Backpack EU</td><td>Login browser-security check</td><td>Browser/device information processed in memory and transmitted in a request header, no fingerprint identifier is stored in cookies, local storage or session storage</td><td>Supports fraud prevention and account security during login. It is not used for analytics, advertising or persistent cross-session tracking.</td><td>Not retained on the device; used for the login request only. Any server-side retention is governed by the Data Privacy Policy and security retention rules.</td></tr></tbody></table>

## 2. User-requested settings and application state

These local-storage entries provide settings or application functions selected or used by the user. They are not used for analytics, advertising or cross-site tracking.

<table><thead><tr><th width="127.16015625">Provider</th><th width="181.08984375">Name / technology</th><th width="245.453125">Storage and scope</th><th width="282.82421875">Purpose and trigger</th><th width="166.1875">Retention</th></tr></thead><tbody><tr><td>Backpack EU</td><td>UI preference entries</td><td>Local storage, exact entry names may vary by application version</td><td>Remembers settings actively selected by the user, including theme, language and chart layouts. Not used for analytics or advertising.</td><td>Until replaced or deleted by the Website or the user through browser settings.</td></tr><tr><td>Backpack EU</td><td>Encrypted application-state entries</td><td>Encrypted local-storage entries, may include the active subaccount identifier</td><td>Maintains the application interface and account context selected by the user. Not used for advertising or cross-site tracking.</td><td>Until replaced or deleted by the Website or the user through browser settings.</td></tr></tbody></table>

## 3. Analytics, advertising and targeting technologies

None currently deployed on the website eu.backpack.exchange. If such technologies are introduced, this List and the [Cookies Policy](/legal-documentation/cookies-policy.md) will be updated and the relevant technologies will be blocked until any consent required by applicable law has been obtained.

## 4. Managing technologies

Users can delete cookies and browser storage through their browser or device settings. Deleting authentication or security technologies may log the user out or interrupt a protected flow. Deleting local-storage entries may reset user preferences, chart layouts or the selected application context.

\
Last update: August 2026<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://eu.support.backpack.exchange/legal-documentation/cookies-policy/list-of-cookies.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.