Cookie Policy
Last updated
This page explains what cookies this site sets, what each one is for and how to turn off the ones that are not strictly necessary. It sits alongside our Privacy Policy, which covers personal data more broadly.
What cookies are
A cookie is a small text file a site asks your browser to store and send back on later visits. We also use technologies that behave like cookies: local storage, session storage and tracking pixels in email. Where this page says "cookies", it means all of them.
What we set, and why
We group cookies into three categories. Only the first is set without asking you.
- Strictly necessary: required for the site to work. Session and authentication cookies that keep you signed in, a cookie recording your consent choices so we stop asking, and security cookies that protect against cross-site request forgery. These cannot be switched off, because switching them off means the site does not function.
- Preferences: remember choices you made. Reduced-motion and theme preferences, and which options you last used in a product. Losing these is an inconvenience, not a breakage.
- Analytics: help us understand how the site is used. Which pages get read, where people arrive from, where they give up. We use these in aggregate; we do not use them to build advertising profiles and we do not sell what they tell us.
Third-party cookies
Some cookies are set by providers we use rather than by us: our analytics provider, our payment processor on checkout pages, and embedded content such as video players. We do not control what those providers do with the data they collect, and their own privacy policies apply. Blocking third-party cookies in your browser will stop most of them without affecting the parts of the site we run ourselves.
Managing cookies
You can change your consent at any time from the cookie settings link in the footer, and your choice is remembered on this device and browser. Clearing your cookies clears that record too, so we will ask again.
Every major browser also lets you block or delete cookies directly, usually under Settings, then Privacy. Blocking strictly necessary cookies will break sign-in and some parts of the site; that is a consequence of how those cookies work, not a penalty we apply.
Do Not Track and Global Privacy Control
There is still no agreed standard for how sites should respond to Do Not Track, so we do not act on it and we would rather say so than imply otherwise. We do honour Global Privacy Control: where your browser sends a GPC signal we treat it as an opt-out of non-essential cookies without asking you again.
Changes
We update this page when the cookies we set change. The date at the top is the date of the current version, and material changes reset consent so you are asked again rather than opted in by default.
Contact
Questions about cookies go to privacy@lofistack.com.