TTSWP uses cookies sparingly. The only cookies this site sets are necessary ones that keep the site running. Our analytics is cookieless, so there is no consent banner - there is nothing to consent to.
Necessary cookies (always on)
These keep the site working: session continuity, CSRF protection, and the cross-domain auth bridge with our app at app.ttswp.com. Under the EU ePrivacy Directive and GDPR Article 6, these do not require consent because they are strictly necessary to deliver the service you asked for.
| Name | Purpose | Domain | Expiry |
|---|---|---|---|
| laravel_session | Identifies your browser session so the site remembers you between page loads | ttswp.com | 2 hours of inactivity |
| XSRF-TOKEN | Cross-site request forgery protection on form submissions | ttswp.com | Session |
| tts_auth | Tells ttswp.com that you are signed in to app.ttswp.com so the navigation shows Dashboard instead of Sign In. HMAC-signed payload with no session token. | .ttswp.com | Set by app.ttswp.com (typically tied to your sign-in session length) |
| __cf_bm | Cloudflare bot management - blocks automated traffic and credential-stuffing. Set automatically by Cloudflare when Bot Fight Mode is enabled. | .ttswp.com | 30 minutes |
Cookieless analytics
We use Ahrefs Analytics to understand which pages people read and where the site needs work. It is cookieless: it sets no cookies, stores nothing in your browser, and does not track you across sites.
Browser storage transparency
The blog audio player uses the browser's sessionStorage (not cookies) to remember if you dismissed the sticky audio player on a given post. Keys look like ttswp.audio.dismissed.{post-slug}. SessionStorage clears when the tab closes. No tracking, no cross-page persistence beyond the current tab.
Managing cookies
You can also block or delete cookies entirely through your browser's privacy settings. If you do that, parts of the site that depend on necessary cookies (sign-in state, session continuity) will not work.
Third parties
Ahrefs Analytics receives aggregate, cookieless usage data. Cloudflare provides bot management and may set the __cf_bm cookie automatically as part of that service. Both are bound by their own terms and privacy policies, listed in our Privacy Policy.
Compliance
Under the EU ePrivacy Directive (Cookie Law) and GDPR Article 6, cookies that are strictly necessary to deliver the service you requested do not require consent. Those are the only cookies this site sets, which is why you see no cookie banner here.
Contact
Questions about this policy go through our Contact page. For details about data processing more broadly, see our Privacy Policy.