Last updated: November 12, 2026
This Cookie Policy explains how EpassCard LLC (“EpassCard”, “we”) uses cookies and similar technologies on the EpassCard app (app.epasscard.com) and on wallet pass pages we host. For how we handle personal data in general, see our Privacy Policy and our GDPR commitment.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies include local storage and session storage. Some are needed for the service to work; others are optional and only used if you allow them.
Your choice
When you first visit, we ask for your consent. You can:
- Accept all: allow analytics and support chat
- Reject all: only strictly necessary cookies are used
- Customize: choose each category yourself
You can change your choice at any time: open Cookie settings from your account menu in the app, or with the cookie button in the corner of a pass page. When you withdraw consent, we delete the cookies of that category and reload the page. You can also block or delete cookies in your browser settings, but parts of the service may then stop working.
Cookies we use
Strictly necessary (always on)
Needed to sign you in, keep the service secure and remember your cookie choice. They do not require consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| ep_consent | EpassCard | Remembers your cookie choice | 12 months |
| epass_access_token, epass_refresh_token | EpassCard | Keep you signed in | 7 days / 30 days |
| epass_admin_access_token, epass_admin_refresh_token | EpassCard | Sign-in for EpassCard staff (admin panel only) | 12 hours / 30 days |
| connect.sid | EpassCard | Completes sign-in with Google, Apple, Facebook, LinkedIn or GitHub | Session |
| epass_qc_device | EpassCard | Prevents abuse of one-tap pass creation | 12 months |
| ep_internal | EpassCard | Marks EpassCard staff browsers so their visits are excluded from statistics | 24 months |
| _GRECAPTCHA | reCAPTCHA protection against bots on sign-in and sign-up | 6 months | |
| __cf_bm, cf_clearance | Cloudflare | Protects the service against bots and attacks | 30 minutes / up to 12 months |
We also use your browser’s local and session storage for sign-in state, your workspace and display preferences (such as dark mode), and unsaved drafts. This stays on your device.
Analytics (only with your consent)
Help us understand how the product is used so we can improve it.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Counts visits and how pages are used | 24 months |
| _clck, _clsk, CLID, MUID | Microsoft Clarity | Usage statistics and session replays (how pages are used) | Up to 12 months |
| ep_ft | EpassCard | Remembers which campaign or site brought you to us | 90 days |
Support chat (only with your consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| crisp-client/* | Crisp | Runs the support chat and keeps your conversation | 6 months |
Without support chat cookies you can still reach us at [email protected].
Our website
Our marketing website (www.epasscard.com) has its own cookie banner. There you can accept or reject analytics and marketing cookies, such as Google Analytics and the Meta (Facebook) Pixel, and change your choice at any time with the cookie icon in the corner of the page. The banner lists every cookie the website uses.
Wallet pass pages
Pass pages (for example links that start with /p/, including businesses’ own domains) show the same cookie choice. Adding a pass to Apple Wallet or Google Wallet is handled by Apple or Google under their own privacy terms.
Changes to this policy
We update this policy when the cookies we use change. If we add a new optional category, we will ask for your consent again.
Contact
EpassCard LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States
Email: [email protected]
