Cookie Notice

Affirm · agreement dated Dec 22, 2025 · Official agreement

57 cards.

Cookie Notice

Last Updated: Dec 22, 2025

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website. Cookies are used by many websites and can do a number of things, e.g. remembering your preferences, recording what you have put in your shopping basket, and counting the number of people looking at a website.

We use the following cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our website. These essential cookies are always enabled because our website won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

Performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily, track errors and improve insights into how the website is performing.

Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region) and deliver content and features tailored to you.

Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We will also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites.

Change your cookie preferences at any time by managing your privacy settings in the Privacy Preference Center. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.

Find out how to manage cookies on popular browsers:

Google ChromeGoogle

Microsoft EdgeMicrosoft

Mozilla Firefox

Microsoft Internet Explorer

Opera

Apple SafariApple

To find information relating to other browsers, visit the browser developer's website.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

Cookie List

Strictly Necessary Cookies

Cookie

Description

Term

pctrk

Used to count page views by unauthenticated users against license usage.

364 days

__cfruid

Cookie associated with sites using CloudFlare, used to identify trusted web traffic.

Session

CookieConsentPolicy

Used to apply end-user cookie consent preferences set by our client-side utility.

364 days

DrupalVisitorMobile

Determines whether the visitor is originating from a mobile device and routes the user to a mobile version, if applicable.

Session

cookietest

Checks to see if the browser is set to block or allow cookies.

Session

LSKey-c$CookieConsentPolicy

Used to apply end-user cookie consent preferences set by our client-side utility.

1 Years

__cf_bm

This CloudFoundry cookie is necessary to support Cloudflare Bot Management. As part of our bot management service, this cookie helps manage incoming traffic that matches criteria associated with bots.

A few seconds

sfdc-stream

Used to properly route server requests within Salesforce infrastructure for sticky sessions.

A few seconds

JSESSIONID

Used to maintain an anonymous user session by the server.

Session

renderCtx

Used to store site parameters in the session for reuse across requests by a single client for functionality and performance reasons.

Session

affirm-csrf-token

A secure random token (e.g., synchronizer token or challenge token) that is used to prevent CSRF attacks. A CSRF secure application assigns a unique CSRF token for every user session.

Session

t_v2_s

This cookie helps detect fraud and provides continuity between each of your checkout attempts with Affirm. This data is necessary for Affirm to improve your experience by understanding where you and other customers are experiencing friction as you use our product.

1 Years

checkout_continuity_service

This cookie helps detect fraud and provides continuity between each of your checkout attempts with Affirm. This data is necessary for Affirm to improve your experience by understanding where you and other customers are experiencing friction as you use our product.

1 Years

OptanonConsent

This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered.

Session

GAESA

Session affinity cookie set with Google Cloud Platform Load balancer.

1 Months

opt_out

This cookie is used to track the user's decision to opt out of cookies on the website, indicating they have chosen not to have their data used for tracking and personalisation purposes.

1 Years

fp_token_xxxx-xxxxx-xxxx-xxxxxx

Assists with device recognition and fraud prevention.

1 Years

session

This cookie is typically used to maintain an anonymized user session by the server.

A few seconds

Affirm-Locale

Strictly necessary cookie for logged in - used to propagate localization

1 Years

sb.anonymousId2

Anonymous session for public visitor analytics for data user is interacting with

1 Years

Functional Cookies

Cookie

Description

Term

_help_center_session

This cookie aids in session for the Zendesk guide.

Session

cf_clearance

Used to verify user is not a bot; user/system has solved a challenge successfully

1 Years

ajs_anonymous_id

These cookies are generally used for Analytics and help count how many people visit a certain site by tracking if you have visited before. This cookie has a lifespan of 1 year.

1 Years

__tld__

From Segment Analytics.js library; this cookie helps to figure out a top-level domain for a user.__tld__

Session

_tq_id.TV-7281456336-1.3158

This cookie is set by TVsquared. The main use of the cookies is to trace conversions from ads back to the initial visit.

729 days

ajs%3Atest

This performance cookie counts visits and tracks other website traffic-related metrics. Cookies in this domain have a lifespan of 1 year.

1 Years

ajs%3Acookies

This cookie supports use, service performance, and functionality of websites. Cookies in this domain have a lifespan of 1 year.

1 Years

BrowserId_sec

Used to log secure browser sessions/visits for internal-only product analytics.

1 Years

_ssc

This domain is associated with TailTarget, a Brazilian data management platform (DMP) that provides customer data to help in targeted advertising.

1 Days

fpjs_group_id

Used by Fingerprint: assists with device recognition and fraud prevention.

364 days

chameleon-profile-id

This cookie is used for testing.

Session

_cfuvid

The _cfuvid cookie is used by Cloudflare to distinguish individual users who share the same IP address for the purpose of enforcing rate limiting rules.

Session

_pinterest_ct_ua

This cookie is being set in relation to PinterestPinterest Marketing

1 Years

fpjs_user_id

Used by Fingerprint: assists with device recognition and fraud prevention.

364 days

visitorId

This cookie is used to identify a unique visitor to enhance the user experience by enabling personalized features and content based on the visitor's preferences and browsing history.

1 Years

Performance Cookies

Cookie

Description

Term

mp_xxxxxxx_mixpanel

Used to identify individual users. This tool is used to measure site performance and usage patterns

1 Years

_gid

This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited._gid

A few seconds

_dd_s

Datadog Cookie used to group all events generated from a unique user session across multiple pages. It contains the current session ID, whether the session is excluded due to sampling, and the expiration date of the session. The cookie is extended for an extra 15 minutes every time the user interacts with the website, up to the maximum user session duration (4 hours).

4 hours

_gat

This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.

10 minutes

s_cc

This cookie is associated with the AdobeAdobe Site Catalyst. It determines whether cookies are enabled in the web browser.

Session

_pk_ses*

This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_ses is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.

30 minutes

_ga

This cookie name is associated with Google Universal Analytics. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the site's analytics reports.

Session

_pk_id*

This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_id is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.

1 Years

mp_5cb8cc91-e409-41c2-af0d-b337e1d966a7_perfalytics

Used to identify individual users. This tool is used to measure site performance and usage patterns

1 Years

_hjSessionUser_xxxxxx

Hotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

Session

_hjSession_xxxxxx

A cookie that holds the current session data. This ensures that subsequent requests within the session window will be attributed to the same Hotjar session.

A few seconds

_hjTLDTest

When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.

Session

tracker_device

This cookie helps detect fraud and provides continuity between each of your checkout attempts with Affirm. This data is necessary for Affirm to improve your experience by understanding where you and other customers are experiencing friction as you use our product.

4 Years

BrowserId

Used for security protection.

1 Years

_s

This cookie is associated with Shopify's analytics suite.

364 days

fs_lua

Used for user session tracking and error debugging

1 hour

axp-override

Used for Affirm analytics purposes.

Session

_ga_xxxxxxxxxx

Used by Google Analytics to identify and track an individual session with your device.

1 Years

fs_uid

Used for user session tracking and error debugging

1 Years

Targeting Cookies

Cookie

Description

Term

contently_insights_user

Identifies internal users so they are excluded from reporting.

729 days

_uetvid

This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website.

1 Years

_pin_unauth

This cookie is associated with pinterest. It is used to track the usage of services.

1 Years

testcookie

This cookie checks whether a user's browser supports cookies.

1 Years

pxrc

Contains information about LiveRamp cookie syncs triggered off the back of this browser. Used to facilitate cookie sync priority queue.

59 days

rlas3

This cookie is generally provided by rlcdn.com and is used for advertising purposes.

364 days

DV

This cookie is used by Google Ads Optimization to provide ad delivery or retargeting and store user preferences.

1 day

AEC

This is used by Google Ads to detect spam, fraud, and abuse to help ensure advertisers are not incorrectly charged for fraudulent or otherwise invalid impressions or interactions with ads, and that YouTubeYouTube creators in the YouTube Partner Program are remunerated fairly

6 months

NID

This is used to show Google ads in Google services for signed-out users

6 months

_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx

This cookie is part of Google Analytics and is used to limit requests (throttle request rate).

Session

_fbp

Used by FacebookFacebook to deliver a series of advertisement products such as real time bidding from third party advertisers

2 Months

visitor_id#####

This is a cookie pattern that appends a unique identifier for a website visitor, used for tracking purposes. The cookies in this domain have a lifespan of 10 years.

Session

ajs_user_id

This cookie helps track visitor usage, events, target marketing, and can also measure application performance and stability.

1 year

_uetsid

This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site.

A few seconds

visitor_id

This is a cookie pattern that appends a unique identifier for a website visitor, used for tracking purposes.

10 years

pardot

Cookie name associated with services from marketing automation and lead generation platform Pardot.

A few seconds

_gat_UA-XXXXXX-X

This cookie is part of Google Analytics and is used to limit requests.

Session

AMCVS_

This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier.

Session

AMCV_

This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier to allow a company to track users across their domains and services.

1 Years

_gcl_au

Used by Google AdSense for experimenting with advertisement efficiency across websites using their services

Session

OAID

Adswizz is an online advertising business specialising in audio advertising.

1 Months

pid

This cookie lets website visitors use TwitterX-related features from within the web page they are visiting.

1 Years

IDE

This cookie is set by Doubleclick and carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.

1 Years

_rxuuid

This domain is owned by Unruly Media, part of News Corp. This cookie carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.

1 Years

dpm

Adobe Audience Manager - data management platform uses this cookie to record information around synchronisation of IDs.

5 Months

li_gc

This domain is owned by LinkedInLinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active Linkedin profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain.

5 Months

u

This domain is owned by Aggregate Knowledge, which has been acquired by Neustar Inc. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.

364 days

am_tokens_eu-v1

This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.

13 Days

muc_ads

This domain is owned by Twitter. It is used as a URL shortening service, which allows Twitter to collect data on how links are shared.

1 Years

anj

This domain is owned by AppNexus Inc. The company provides a range of online advertising technology and services.

2 Months

_GRECAPTCHA

Used by Google reCaptcha for risk analysis

5 Months

ssi

This cookie is typically used for tracking the user's movements across the website to optimize the user experience and serve targeted ads.

1 Years

YSC

YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

Session

MUID

This domain is owned by Microsoft - it is the site for the search engine Bing.

1 Years

__181_cid

This domain is associated with Bombora, a company that provides B2B intent data for marketing and sales.

1 Years

SERVERID

This domain is owned by Eyeota, a global company specialising in audience data to enable targeting of advertising based on visitor profiling.

Session

uid-bp-xxxxx

This domain is owned by StickyAdsTV, a French company providing online video advertising services.

1 Months

tuuid

Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimize advertisement relevance and ensure that the visitor does not see the same ads multiple times.

1 Years

CMPS

This domain is owned by Casale Media. The main business activity is: Advertising

2 Months

personalization_id

This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations that is primarily used for tracking and targeting.

1 Years

_rlsnc

This domain is associated with Retargetly, a data platform that provides targeted advertising services.

Session

tv_UIDM

This domain is owned by Tremor Video which provides a marketplace for online video based cross-device advertising.

2 Years

_ljtrtb_16

This domain is owned by Federated Media Publishing. The main business activity is: Advertising

1 Years

tuuid_lu

Contains a unique visitor ID, which allows Bidswitch.com to track the visitor across multiple websites. This allows Bidswitch to optimize advertisement relevance and ensure that the visitor does not see the same ads multiple times.

1 Years

csync

This domain is owned by Smart Ad Server. The main business activity is: Advertising

1 Years

tv_UICT

This domain is owned by Tremor Video which provides a marketplace for online video based cross-device advertising.

2 Years

pb_rtb_ev_part

This domain is owned by Pulsepoint (formerly Contextweb). The main business activity is: Digital marketing, real time ad bidding exchange and audience profiling

1 Years

CMPRO

This domain is owned by Casale Media. The main business activity is: Advertising

2 Months

bscookie

Used by the social networking service, LinkedIn, for tracking the use of embedded services.

1 Years

AnalyticsSyncHistory

Used by LinkedIn to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries

1 Months

test_cookie

This domain is owned by Doubleclick (Google). Used to check if the user's browser supports cookies.

A few seconds

INGRESSCOOKIE

This domain is owned by Pulsepoint (formerly Contextweb). The main business activity is: Digital marketing, real time ad bidding exchange and audience profiling

Session

TapAd_TS

This cookie carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.

1 Months

UID_EXT_xx

This domain is owned by Undertone. The main business activity is: Digital advertising services

1 Years

MSPTC

This domain is owned by Microsoft. This cookie is used to track user engagement and interaction with the website to enhance customer experience and website functionality. It may collect information about how users navigate and use the site, helping to identify preferences and improve service delivery.

389 days

tluidp

This domain is owned by TripleLift, a USA based business providing programmatic native advertising services.

2 Months

CMID

This domain is owned by Casale Media. The main business activity is: Advertising

1 Years

TESTCOOKIESENABLED

YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

1 day

mv_tokens

This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.

13 Days

am_tokens

This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.

13 Days

TapAd_3WAY_SYNCS

TapAd sets this cookie for data synchronization with advertising networks.

1 Months

lpv778433

This domain is owned by Pardot, a marketing automation platform which provides lead generation services to businesses.

30 minutes

VISITOR_PRIVACY_METADATA

Used by YouTube to store the user’s privacy and consent settings for embedded videos. It helps ensure that user privacy choices (like consent for personalized ads or tracking) are respected when watching embedded YouTube content.

5 Months

demdex

This cookie helps Adobe Audience Manager perform basic functions such as visitor identification, ID synchronization, segmentation, modeling, reporting, etc.

5 Months

bcookie

This is a Microsoft MSN 1st party cookie for sharing the content of the website via social media.

1 Years

anProfile

This domain is owned by Datonics. This cookie is used to store user preferences and personalization settings to enhance the browsing experience by delivering content and features tailored to the user's profile.

179 days

_ssuma

This domain is owned by Sitescout. The main business activity is: Real time advertising platform

29 days

ljt_reader

Collects data related to reader interests, context, demographics and other information on behalf of the Lijit platform.

1 Years

centro

This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.

13 Days

uuid2

This cookie allows targeted advertising through the AppNexus platform - collects anonymous data on ad views IP address, page views, and more.

2 Months

mv_tokens_eu-v1

This domain is associated with Mediavine, Inc. which provides website monetization services, including advertising optimization for publishers.

13 Days

lidc

This is a Microsoft MSN 1st party cookie that ensures the proper functioning of this website.

A few seconds

tluid

This domain is owned by TripleLift, a USA based business providing programmatic native advertising services.

2 Months

ab

This domain is owned by Aggregate Knowledge, which has been acquired by Neustar Inc. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.

1 Years

UID

This domain is owned by StickyAdsTV, a French company providing online video advertising services.

1 Months

tvid

This domain is owned by Tremor Video which provides a marketplace for online video based cross-device advertising.

1 Years

UserMatchHistory

Contains a unique identifier used by LinkedIn to determine that two distinct hits belong to the same user across browsing sessions.

1 Months

VISITOR_INFO1_LIVE

This cookie is set by Youtube to keep track of user preferences for Youtube videos embedded in sites; it can also determine whether the website visitor is using the new or old version of the Youtube interface.

5 Months

TapAd_DID

This domain is owned by Tapad Inc. a US based company that provides technology to track users across devices to enhance targeting capabilities.

1 Months

VP

This domain is owned by Pulsepoint (formerly Contextweb). The main business activity is: Digital marketing, real time ad bidding exchange and audience profiling

1 Years

ar_debug

This domain is owned by Pinterest. This cookie is used for troubleshooting and analytical purposes, intended to track errors and improve services by providing insights into how the website is functioning.

1 Years

i

This domain is owned by OpenX. The main business activity is: Advertising

1 Years

TestIfCookieP

This domain is owned by Smart Ad Server. The main business activity is: Advertising

1 Years

li_sugr

Used by LinkedIn to make a probabilistic match of a user's identity outside the Designated Countries

2 Months

uids

This cookie is used to identify unique visitors by assigning a randomly generated number as a client identifier, enabling the tracking of user interactions with the website primarily for targeted advertising purposes.

2 Months

Payment options through Affirm are provided by these lending partners: affirm.com/lenders. Your rate will be 0–36% APR based on credit, and is subject to an eligibility check. Affirm Pay in 4 payment option is 0% APR.

Options depend on your purchase amount and may vary by merchant. A down payment may be required. For example, at a purchase price of $400 you could pay a down payment of $80, followed by 12 monthly payments of $28.88 at 15% APR or 4 interest-free payments of $100 every 2 weeks. Affirm availability and eligibility may vary. Restrictions apply. See affirm.com/terms#use.

The Affirm Money™ Account is held with Cross River Bank (CRB), Member FDIC. Affirm is not a bank. FDIC insurance covers accounts held with CRB in the event CRB fails. California residents: Affirm Loan Services, LLC is licensed by the Department of Financial Protection and Innovation. Loans are made or arranged pursuant to California Financing Law license 60DBO-111681.

The Affirm Card is a Visa® debit card issued by Evolve Bank & Trust (Evolve) or Stride Bank, N.A. (Stride), Members FDIC, pursuant to licenses from Visa U.S.A. Inc. Affirm is not a bank. FDIC insurance will only cover the failure of Evolve and/or Stride. Learn more. The Affirm Card is not available to residents of U.S. territories.

The one-time-use Affirm virtual card is issued by CRB, Sutton Bank, or Celtic Bank, Members FDIC, pursuant to a license from Visa U.S.A. Inc. Affirm, Inc., NMLS ID 1883087. Affirm Loan Services, LLC, NMLS ID 1479506. For licenses and disclosures, see affirm.com/licenses.