Cookie Policy
Last updated: 2026-05-01
This page lists every cookie and similar storage technology used on lockthefuckin.app, why we use it, how long it lives, and how you withdraw consent. The legal basis for any cookie that is not strictly necessary is your prior consent, in line with Article 5(3) of the EU ePrivacy Directive and the equivalent UK PECR rules.
1. Strictly necessary (no consent required)
- cf_clearance (Cloudflare). Bot mitigation and rate limiting. Up to 30 days. First-party.
- session id (server). Maintains your session within a single visit. Cleared when you close the browser.
- ltfi.consent.v1 (this site). Records your cookie-banner choice so we don't ask again. localStorage. 12 months. First-party.
2. Analytics (consent required)
When you accept analytics on the cookie banner, our analytics provider may set a small number of cookies or use localStorage to count anonymous visits. No name, email, or identifiable IP is stored. Retention: up to 14 months.
No analytics cookie or storage is set before you accept on the banner. Decline keeps analytics off entirely.
- _ga, _ga_* (Google Analytics). Counts unique visits and page interactions. Up to 2 years. Third-party.
If we add Amplitude in a future release, this section will be updated before it goes live, with the same consent gate.
3. Functional
None at this time. We will update this policy if that changes.
4. Marketing or advertising
None. We do not run advertising on this site, and we do not allow advertising trackers.
5. How to withdraw consent
You can withdraw consent at any time by:
- clicking "Cookie settings" in the site footer to reopen the consent banner;
- clearing site data in your browser settings; or
- emailing [email protected] and asking us to confirm your withdrawal.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. Third-party services that may set storage
Even when you decline analytics, some technically necessary services on this page may exchange limited information with their providers, namely Cloudflare for delivery and security and, on some pages, Google Fonts for font delivery. Where applicable, we are working to self-host these to reduce third-party calls.