Cookie Policy

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20260101_rev01

Full text changes — 20260101_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1**Cookie****Provider (1P/3P)****Expiry****Use / categorization rationale**ACCOUNT\_CHOOSERGoogle (3P)Up to 6 monthsStores Google account chooser state for Sign-In UX and security.AECGoogle (3P)Up to 6 monthsEnsures requests are made by the user and not malicious sites; anti-abuse.G\_AUTHUSER\_HGoogle (3P)SessionFacilitates Google login and sharing on Change.org.G\_ENABLED\_IDPSGoogle (3P)SessionFacilitates Google login and sharing on Change.org.HSIDGoogle/YouTube (3P)Up to 13 monthsTracks Google account ID and recent sign-in time for security.LANGPayPal (3P)SessionProvides PayPal payment options and security.LSIDGoogle (3P)Up to 2 yearsGoogle account session management and security.LSOLHGoogle (3P)Up to 2 yearsLogin session state and security for Google services.New Relic scriptNew Relic (3P)SessionPerformance metrics (e.g., page load times, transaction traces).SOCSGoogle (3P)Up to 13 monthsSecurity/state management for Google services; may record consent status.Sentry scriptSentry (3P)SessionError diagnostics (logs, stack traces, device/browser info, IP).SIDGoogle/YouTube (3P)Up to 13 monthsTracks Google account ID and recent sign-in time for security.X-PP-SILOVERPayPal (3P)SessionProvides PayPal payment options and security.\_\_Host-1PLSIDGoogle (3P)Up to 2 yearsGoogle account session integrity and security.\_\_Host-3PLSIDGoogle (3P)Up to 2 yearsGoogle account session integrity and security.\_\_Host-GAPSGoogle (3P)Up to 2 yearsMaintains Google session state and security for Sign-In.\_\_Secure-1PAPISIDGoogle (3P)Up to 2 yearsAuthentication/abuse prevention for Google services; security-only configuration.\_\_Secure-1PSIDGoogle (3P)Up to 2 yearsAuthentication and session security; security-only configuration.\_\_Secure-1PSIDCCGoogle (3P)Up to 1 yearSession security and fraud prevention; security-only configuration.\_\_Secure-1PSIDTSGoogle (3P)Up to 2 yearsTimestamped token to protect Sign-In and prevent abuse; security-only configuration.\_\_Secure-3PSIDTSGoogle (3P)Up to 2 yearsTimestamped token to protect Sign-In and prevent abuse; security-only configuration.\_\_Secure-BUCKETGoogle/YouTube (3P)Up to 13 monthsPrevents spam/abuse and ensures secure operation of embedded Google/YouTube services. Not used for advertising.\_\_Secure-ENIDGoogle (3P)Up to 13 monthsPrevents spam/fraud and protects services against abuse. Not used for advertising.\_\_Secure-STRPStripe (3P)Up to 1 yearStripe security and fraud-prevention for payments/embedded components.\_\_cf\*Cloudflare (3P)SessionGeneral Cloudflare security cookies.\_\_cf\_bmCloudflare (3P)Up to 30 minutesPrevents certain attacks (DDoS) and other security risks.\_\_cf\_ob\_infoCloudflare (3P)SessionPrevents certain attacks (DDoS) and other security risks.\_\_cf\_use\_obCloudflare (3P)SessionPrevents certain attacks (DDoS) and other security risks.\_\_cfduidCloudflare (3P)SessionLegacy Cloudflare security cookie (used only if enabled).\_\_cfruidCloudflare (3P)SessionPrevents certain attacks (DDoS) and other security risks.\_\_cfuidCloudflare (3P)SessionPrevents certain attacks (DDoS) and other security risks.\_\_cfuvidCloudflare (3P)SessionPrevents certain attacks (DDoS) and other security risks.\_\_stripe\_midStripe (3P)Up to 1 yearPrevents payment fraud.\_\_stripe\_sidStripe (3P)SessionPrevents payment fraud.\_GRECAPTCHAGoogle (3P)Up to 6 monthsreCAPTCHA bot detection and abuse prevention for forms; may be set on google.com.\_change\_idChange.org (1P)SessionTracks user state and login.\_change\_langChange.org (1P)Up to 13 monthsTracks language preference.\_change\_sessionChange.org (1P)SessionMaintains session for logged-in users.\_helpjuice\_session\_v2Helpjuice (3P)SessionMaintains session for our Help Center/knowledge base.\_px3Human Security (3P)Up to 1 yearBot/fraud detection.\_pxff\_\*Human Security (3P)SessionBot/fraud detection.\_pxhdHuman Security (3P)Up to 1 yearBot/fraud detection.\_pxvidHuman Security (3P)Up to 1 yearBot/fraud detection.app\_meta\_ppmu\_ty\_receiptChange.org (1P)Up to 13 monthsTracks user preferences (e.g., banner dismissals, promotions, unsubscriptions).app\_meta\_promoted\_tyChange.org (1P)Up to 13 monthsTracks user preferences (e.g., banner dismissals, promotions, unsubscriptions).app\_meta\_starter\_dash\_prompt\_bannerChange.org (1P)Up to 13 monthsTracks user preferences (e.g., banner dismissals, promotions, unsubscriptions).app\_meta\_unsubscribe\_gtmChange.org (1P)Up to 13 monthsTracks user preferences (e.g., banner dismissals, promotions, unsubscriptions).cf\_clearanceCloudflare (3P)Up to 1 yearCloudflare challenge clearance; protects against abuse.cidStripe (3P)SessionProvides payment options and security.cookie\_bannerChange.org (1P)Up to 13 monthsStores cookie preferences.countryChange.org (1P)Up to 13 monthsShows content relevant to a user's country.docs.prefsStripe (3P)SessionProvides payment options and security.dont\_auto\_login\_via\_facebookChange.org (1P)Up to 13 monthsAllows users to disconnect Facebook auto-login.enforce\_policyPayPal (3P)SessionProvides PayPal payment options and security.fbsr\_\*Meta/Facebook (3P)SessionFacilitates login and sharing on Change.org.g\_stateGoogle (3P)SessionTemporary state for One-Tap/Sign-In flow; anti-abuse.l7\_azPayPal (3P)SessionProvides PayPal payment options and security.machine\_identifierStripe (3P)Up to 1 yearPrevents payment fraud.membership\_viewChange.org (1P)Up to 6 monthsPersonalizes membership signup options displayed.optimizelyEndUserIdOptimizely (3P)Up to 13 monthsInclude/exclude user in experiments per consent.optimizelyOptOutOptimizely (3P)Up to 13 monthsRecords a user's Optimizely opt-out state.pending-signature-\*Change.org (1P)SessionKeeps track of signatures requiring authentication.private\_machine\_identifierStripe (3P)Up to 1 yearProvides payment options and security.pxctsHuman Security (3P)SessionBot/fraud detection.recent-viewsStripe (3P)SessionProvides payment options and security.sc\_fPayPal (3P)SessionProvides PayPal payment options and security.stripe.csrfStripe (3P)SessionCSRF protection for Stripe.tsPayPal (3P)SessionProvides PayPal payment options and security.ts\_cPayPal (3P)Up to 3 yearsProvides PayPal payment options and security.tsrcePayPal (3P)SessionProvides PayPal payment options and security.uuidChange.org (1P)Up to 13 monthsTracks user state and login.